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", 0x4d0, r0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x7, 0x44000) write$P9_RWRITE(r2, &(0x7f0000000140)={0xb, 0x77, 0x1, 0x5}, 0xb) r3 = socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000180)={r2, 0x3, 0xd31, "cbdafd2d6bbfab8da883330bad3ea6857d467043dbb1769a0bd75b4c78a6deacf10ba98aaf7dd7a640c01d7db1a5c7c828f23d54ab54eee2dd1d04db85a5378a09ff7afbaeb7d6e5aff774b1547a1b8b6c65b34ce11897151c7fe5a0eeaf25afd0d4711367568d8832beb28874027a809c982937234414"}) keyctl$revoke(0x3, r1) 16:38:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x20000000, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:30 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:30 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0189436, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 210.995830] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 211.049433] binder: BINDER_SET_CONTEXT_MGR already set [ 211.066821] binder: 12626:12629 ioctl 40046207 0 returned -16 [ 211.079166] REISERFS warning (device loop0): sh-2021 reiserfs_fill_super: can not find reiserfs on loop0 [ 211.099191] binder: BINDER_SET_CONTEXT_MGR already set [ 211.122283] binder: 12626:12629 ioctl 40046207 0 returned -16 16:38:30 executing program 5: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000040)=0xfff, 0x4) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000100)=0xd7) syz_mount_image$reiserfs(&(0x7f0000000280)='reiserfs\x00', &(0x7f00000002c0)='./file0\x00', 0x2, 0x7, &(0x7f0000000580)=[{&(0x7f0000000300)="2d03c6aba76a31073f3e893a26302ab5b9426174d6131dbdef0e788ced1220e36a42d5b2a81a76f13602c75e8d72dc509f08c9344a29e1f09644d5a7da2fb9da9251c2205bee3300ee37162f5320bb6e35a5a0806f6af42e87d8aa07d46e7f4f902535cb1bb270ed0e2b", 0x6a, 0x1}, {&(0x7f0000000380)="3522c4e9300eda3a45539a0a723c031938b4dfa9a3d05f750faa3f2e65d2896ddfa4ae6bfa4fb4fd0da8263e8382e443846851be05145b74276d16bbe52194920e30788a8e7f70388b737fcc7bcf4da7308dcf73565f2da60d16b7e96a0c264a04970f", 0x63, 0x4}, {&(0x7f0000000400)="015065ee9848dea53ffa52b8f4a511d244d8e96f5d85c58de474015c7eb4e2ef3b59387456ef182880aa34a648a086068cd506a52f6c7073d6a50ff10579ac758487b8c801184c326d03416d8a3502e7fbf0ac4bcb0656a598e15381d57a304b33509bfdef4089b459efe406dd", 0x6d, 0x4}, {&(0x7f0000000480)="3005c611d41abad9297e1b08f5a2344e7a951d12eaf318be85b3dea8584317a7e10787f32e96b8511b8482e4aab784372b2949707a6433efb86bbf8f74f47231a67f2ad8552379d0cc5506b82bfaffe51eebeade862ffbc78943045173a485262b7021db46e63cc6dccffc517a0e1f4809df0e382e42b0881751af632f9f73403b24c570173e93669fba09d503c3", 0x8e, 0x7168}, {&(0x7f0000001480)="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", 0x1000, 0x3ff}, {&(0x7f0000000540), 0x0, 0x8}, {&(0x7f0000002e80)="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", 0x1000, 0x7}], 0x100000, &(0x7f0000000640)={[{@noacl='noacl', 0x2c}, {@data_ordered='data=ordered', 0x2c}, {@hash_rupasov='hash=rupasov', 0x2c}]}) r1 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f0000000000)=[{{&(0x7f0000001400)=@alg, 0x80, &(0x7f00000026c0), 0x0, &(0x7f0000002740)=""/218, 0xda}}], 0x50d74cc256620dbb, 0x0, &(0x7f0000002e40)={0x77359400}) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='./file0\x00') listxattr(&(0x7f0000000540)='./file0\x00', &(0x7f0000000680)=""/252, 0xfc) keyctl$session_to_parent(0x12) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000780)) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f00000001c0)={0x10}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000420046b2df71bd09cdfeb68889eeeff8942c0501a3ba806c1080000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x41}, 0x0) 16:38:30 executing program 7: r0 = socket$inet6(0xa, 0x2, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x32, 0xffffffffffffffff, 0x0) listxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=""/235, 0xeb) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) syz_mount_image$ntfs(&(0x7f0000000380)='ntfs\x00', &(0x7f00000003c0)='./file0\x00', 0x176, 0x4, &(0x7f0000000680)=[{&(0x7f0000000400)="32d65ef1b61012f833b3aa7e5cc6750e5795547f8784aa62cc58c9685db9c6694cf4ed961eb9290204d4c14f5dcb21b4d411aeceb999e7a80b1b0704bfd7d9", 0x3f, 0x100}, {&(0x7f0000000440)="6be176ebb6bf3b9f1fab4881d2a4c9481da1b250ce05e61d433c292f725e1aeab8cdeb46fd60189d90a847647d1e1e03d75391a0e95f191f8b6fd4ddb1f31f279675517ee4290b68f37ac6ec381f7d68a086929432c5f2b6785cf4ff7aaa73047222d7c3799d289546d83ee11e20cca7cfbb9171516819e346787e2015a640f8d6daed59426aec3f6e1ad6ac37c8d50b9314cd490d17a3527956", 0x9a, 0x1}, {&(0x7f0000000500)="bbcdd9d2d363dfbbfc76644e06c60c693299663e4cacf9a8e83280c805bb781b9f2c3969dddf44f240b3f49f9c5214070f67c95449305209ca35c53fcf72211b815613010c158c49c40c78986d55c0301247b34fed86e073", 0x58, 0x8}, {&(0x7f0000000580)="0f4dbe0dc8ab3645a4e72760b3d0ace52d800ab96bf279fccdc6d6430c455ec921c970956d8c4dfb70a6c8d0e5ac627e0b58913d4a31b6403bca142ab31fc0ca97c5e183459d4a730f97f731b095fa2ea5c4ee5e9e44bb38d56057d558e3f013a422a02a90910f2e73aa8d5e0ceb742cffee1ffe8f3d77c67f412d5cf5bec6bf0f7bcd7e8c65e265cf7070cfaa3dd29d1a4372567686827a8e30533da204eaaa699b94ff68e130acbeb91b1faf534eba0dfb21e09f4ad4f51fd2a43d256ebcb15549", 0xc2, 0x9}], 0x1080, &(0x7f0000000700)={[{@dmask={'dmask', 0x3d}, 0x2c}, {@errors_remount='errors=remount-ro', 0x2c}]}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x60}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)={0x54, r2, 0x1, 0x70bd25, 0x25dfdbff, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xc}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x28}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x54}, 0x1}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r3, 0x0, 0x61, &(0x7f0000001000)={'filter\x00', 0x4, "40012e1b"}, &(0x7f0000000140)=0x28) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000780)=""/29) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000740)=0x2, 0x4) 16:38:30 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x4a05, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:30 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f13000)={0xa, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0xa}, 0x1c) syz_emit_ethernet(0x3e, &(0x7f0000694ffe)={@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2}, [], {@ipv6={0x86dd, {0x0, 0x6, "06f526", 0x8, 0x11, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [], 0x1}, {[], @udp={0x0, 0x2, 0x8}}}}}}, &(0x7f0000775000)) recvfrom$inet6(r0, &(0x7f0000000040)=""/28, 0x1c, 0x2060, &(0x7f0000000080)={0xa, 0x4e21, 0x4, @dev={0xfe, 0x80, [], 0x20}, 0x1f}, 0x1c) [ 211.515713] binder: BINDER_SET_CONTEXT_MGR already set [ 211.524508] binder: 12655:12658 ioctl 40046207 0 returned -16 [ 211.535546] binder: BINDER_SET_CONTEXT_MGR already set [ 211.543212] binder: 12655:12658 ioctl 40046207 0 returned -16 16:38:31 executing program 6: r0 = socket$inet6(0xa, 0x9, 0x1) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000380)='/dev/rtc0\x00', 0x20200, 0x0) getsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000440), &(0x7f0000000580)=0x4) r3 = getgid() r4 = creat(&(0x7f0000000240)='./file0\x00', 0x44) getpeername$packet(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14) sendmsg$nl_route(r4, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1010000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="380000001d00200025bd7000ffdbdf2502000000", @ANYRES32=r5, @ANYBLOB="86da9780d4847e9454b7a9000000f9130003000100000006000000940000000000008072e5725b27db19bf1f58628bd73330bd3659fde03435c945d2a8baf70127e8c6246283e5ffa4fb0e144b6f9defbbb6679ed06793c3716613fb0ac55a1c33fe86bba843039935450a9b0f8d1b64f41512ebde33af3e89d09f5eade974e108416f3ba051f8bc41559b0ace6d3d6be8ce45ad09245c785d200b2869410c3ad261036b5fe355eb5190abdd072d87a8ddd79f925adbf78159d4e43cd243b0de7289c13d9e"], 0x38}, 0x1, 0x0, 0x0, 0x40005}, 0x40001) chown(&(0x7f0000000100)='./file0\x00', r1, r3) ioctl$KVM_HAS_DEVICE_ATTR(r4, 0x4018aee3, &(0x7f0000000600)={0x0, 0x3, 0xd2f9, &(0x7f00000005c0)=0x7}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r2, &(0x7f00000006c0)={0x10}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}, &(0x7f0000000040)=0x10) r6 = dup(r2) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) ioctl$sock_FIOSETOWN(r6, 0x8901, &(0x7f0000000680)=r7) ioctl(r0, 0x5, &(0x7f0000000280)="025cc83d6d345f8f762070") ioprio_set$uid(0x3, r1, 0x1) mq_open(&(0x7f0000000080)='\\eth1#},)md5sum(eth0,+selfuser\x00', 0x42, 0x10, &(0x7f00000000c0)={0x10000, 0x73b, 0x328, 0x81, 0x7, 0x0, 0x9, 0x80000001}) mq_open(&(0x7f00000001c0)='\\eth1#},)md5sum(eth0,+selfuser\x00', 0x41, 0x100, &(0x7f0000000200)={0x3, 0x7, 0x9, 0x81, 0x6, 0x401, 0x8, 0x800000}) 16:38:31 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8929, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08060006080006040001ffffffffffff03000000aaaaaaaaaa0002ac1414aa"], &(0x7f00000000c0)) 16:38:31 executing program 3: r0 = open(&(0x7f00000005c0)='./file0\x00', 0x2990a421fb17c039, 0x61) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000600)={0x0, 0x4, 0x9}, &(0x7f0000000640)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={r1, @in6={{0xa, 0x4e22, 0xfffffffffffffffa, @remote={0xfe, 0x80, [], 0xbb}, 0xfffffffffffffff9}}}, &(0x7f0000000740)=0x84) openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) exit_group(0x0) ioctl$TCSETS(r2, 0x40045431, &(0x7f00003b9fdc)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000140)=0x61) read(r2, &(0x7f0000000040)=""/11, 0xffed) r3 = syz_open_pts(r2, 0x0) ioctl$TCXONC(r3, 0x540b, 0x10000001b7) 16:38:31 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x4a05000000000000, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:31 executing program 7: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000100), 0x800) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000140)=[@in={0x2, 0x4e22, @rand_addr}, @in={0x2, 0x4e20}, @in6={0xa, 0x4e21, 0x81, @local={0xfe, 0x80, [], 0xaa}, 0x74570be4}, @in6={0xa, 0x4e20, 0x7}], 0x58) prctl$intptr(0x26, 0x1) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xfc, 0x4c080) getsockname(r1, &(0x7f0000000380)=@pppoe={0x0, 0x0, {0x0, @random}}, &(0x7f0000000340)=0x1ff) shmget(0x0, 0x3000, 0x108, &(0x7f0000ffd000/0x3000)=nil) r2 = shmget(0x2, 0x4000, 0x78000000, &(0x7f0000ffa000/0x4000)=nil) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x4, 0x400, 0x1f, 0x3, 0x100000001, 0x80000000, 0xffffffff, 0x8, 0x20, 0x6, 0x767d, 0x9}, {0x0, 0x6, 0x7ff, 0x7fff, 0x7fff, 0x40, 0x3ff, 0x0, 0x0, 0x1, 0x9, 0x401, 0x2}, {0x40, 0xf8, 0x80000001, 0x7, 0x4, 0x0, 0x6, 0x18f, 0x3, 0x7, 0xbe29, 0x2de4, 0x2}], 0x8000}) ioctl$SG_GET_SCSI_ID(r1, 0x2276, &(0x7f0000000040)) sendmsg$key(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0212030f0c00000029bd7000fddbdf250800190000000000fa004e2401000000ff020000000000000000000000000001030000000a004e222d8a0000000000000000000000000000000000001a07000002000100000004d401016f0001000000"], 0x60}, 0x1}, 0x4) shmat(r2, &(0x7f0000ff9000/0x4000)=nil, 0x7000) clone(0x0, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000000)) 16:38:31 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:31 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8910, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x3, 0x400000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x2, &(0x7f000039a000)=[{0x20, 0x0, 0x0, 0xfffffffffffff00c}, {0x6}]}, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') sendmmsg(r2, &(0x7f0000008440)=[{{&(0x7f0000000c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x80, &(0x7f0000001100), 0x0, &(0x7f0000001340)}}, {{&(0x7f0000002f80)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000082c0), 0x0, &(0x7f0000008340)}}], 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000080)=""/75) 16:38:31 executing program 6: mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x88040, 0x0) syz_mount_image$f2fs(&(0x7f0000000040)='f2fs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x8, &(0x7f0000000780)=[{&(0x7f0000000100)="0e44446aecec78360254e42e9068b2a93da787f27b51f065bfb01d23986549e90799a3319744c7a838887a7df6e249ef77141fcefbe067c95078c826d6968879e5e7cb1438c05d7e02069b917641f919eb58f7d8d3ea1eef329dc81025722964dfef1c62776ad3823f62ab1fa26233eac35bc5c3e4be35a919f323800739c4b1bef6fa82105b356bec6eed51fde11c3eefe835b8142e97168a192a94b8f380bf85e8b2632bfe63d49ab17a04e69133a08ca27b05587db415587b4a87a57783fa038bfab285eee056a16aa3a6315dd60e70849ef84a5cfa0bd4f62a1af6940883", 0xe0, 0x23}, {&(0x7f0000000200)="d0b2410e9b50ea67096c90f0d995b176291a55d54fbb5f3a35ee606c75ac339bb33cb94d93d00ca598b89a519b9754d0f5239a7370050d5ae7b08cfa4ea32c0a24de097fae709979a63ef2a012cb7991ed0a303574f80a31b59c76a2b3fa8462d764c437c4c6513fe084b832a8fb32c391fe1061eb9375f7a0a6003bdb6d1f64f9cdac552b89663f76cace5011b5f3a4229d109494846b745afefc16bca1008b4523c290bd722293f76b001fde88b8557615d82f5e38b37e425a47180e007f27c1672057", 0xc4, 0xff}, {&(0x7f0000000300)="5aad5737b9d784bdb5c403bd62ca41cf4581c3b3a12bba8cbb6b916bc5b26f90968385962b7405b943b1c1683a4b21ce02ca77997524b78bcaaac6dd39ec4b897a158f377e47856482bc4d4809fa8f8b19c8b8097510be77739dcec1376a794838e36de0946265aacafe2e8897b9731748a8385577522de9c696039d34cdf3ccfc270a8d32621c421819c8ab74", 0x8d, 0x4}, {&(0x7f00000003c0)="2607128f591dd6965ae964f7c8606fd3289a507316b014a6608324eea41e21323518762ca1ca9e3cb39f28997c8dccd2df1417f145bb74736ed819fc6594d95e2b2c9d1a0677dd73e28979ccf7f7236a51040d4a982746ec077ac28039df3b06bb5b12a64e7057529fd639331a032cefb2c58a7846ca46c4af477c7abaf72d30969965f7261fe8aec618278d268d7a2bdca6c4abc2c57f1d4f61bf347febcbee710419c6039b5fefb151700336fc99e002b39fb9707f4a694bc6eb4f7787ddea2ae9f84c6cf5b65ddaeb85ffe709cdde1184c09864eff698d14c311dfe36193a0e4b38", 0xe3, 0x200}, {&(0x7f00000004c0)="b2be7342b30d4ca26d237ece192eb468da753ad3ecda3f7371b8930280d21704db554575e40d415ce7df147c10cb484ad06d74940a87", 0x36, 0x7}, {&(0x7f0000000500)="b93f191e768a3b73f22858b2e99da6d7f824632b22e81fbad7f7bd1d97a0b554ee19accbba0e310d6b4c365dd28efe820f287fff1b80f17b8642b6c8450e5f7985cd8b33f4293412ff97b96c7491e1e64ff246d6750f872390e97f71dfa3cf31853b7a16cc8c70ebd15233aaf98baa8a5d08c4143e49c78d06700068556935e71214bb62de1207a4216586dd48243b4fdd310b988912367cc1a269d4f7d5d04fa2c9630a79a924de15a4016db60130f873bfa42d544569cc807f3d3e4d", 0xbd, 0x9}, {&(0x7f00000005c0)="bcc1b382bbaf658351f14c48c90a48ea2e04b488ebdc2832042e37ce44ac531a00f1548bca0a6b22c5d8f475e04a8acca690f51efe7e5a1e00d45a7ce33d4736c2920951e1749fe9cafe6805164551f88d35be3274c86a7b869caf33aa752cf156f71e102a47095ada60afb97e006204287b7f7c1434725ec5b6ef6495dcf98d77c77bef", 0x84, 0x1}, {&(0x7f0000000680)="f52305da09f279d8134a6747170de50d3e2f1e99ee1bdf5302db5a02a50071b79b17429f5e55767b6066cf17feef4db071691d6de681910c356d32df0a7e4b017db021ef8dd63c9bbe4d0d5f7d782c2bb97c8deeb36b3fb38c3f262e862ce11ac11c95ffea45ddc571d75474af09f893d5e9dfbf8ce63253e2c094a92744e80012d2edd0c31cb83bac7e712db47e4a548cab377a5bb8ee64014e68ed8fc8eb74ad813790723f6977783275f4f4636e31cdaad2ba360fcc8e9ac3fc0f031bb664c35014b58a7953c1c9238bf0c0d7f261060a13b55187aa4ba900e682140de8", 0xdf, 0x5}], 0x20, &(0x7f0000000840)={[{@nolazytime='nolazytime', 0x2c}, {@noflush_merge='noflush_merge', 0x2c}, {@noinline_data='noinline_data', 0x2c}, {@quota='quota', 0x2c}]}) mount(&(0x7f0000033ff4)='./file0/bus\x00', &(0x7f000000fff8)='./file0\x00', &(0x7f0000032ffb)='fuse\x00', 0x7ffbf, &(0x7f0000032000)) creat(&(0x7f0000000000)='./file0/bus\x00', 0x0) [ 212.007907] binder: BINDER_SET_CONTEXT_MGR already set 16:38:31 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 212.028933] binder: 12707:12718 ioctl 40046207 0 returned -16 16:38:32 executing program 5: mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x6) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000180)={'bridge_slave_0\x00'}) write$binfmt_script(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="2321202e2f66696c6530206272696467655f736c6176655f30002062726964676568736c6176655f300020206272696467655f736c6176655f300020206272696467655f736c6176655f3000200a254a2fffffffffffffffff8a28a90ceff88c70fe3ad8f8d146473f1393499d439f28a27814bf55b1c664665423a6d7a3d70c28eb10eceff69c6e2ee0f1f1fafccf071d7de950090587bd8a419975d3b2bd6c120bf8b577b038f8016bff91027b21cba149a8a87f5d7078830155ab7c56df00000000000000"], 0xb6) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000009c0)={'bridge_slave_0\x00', 0x2000000c0ffffff}) 16:38:32 executing program 0: syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f0000000340), 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="737562766f6c69643d3078303030303030303030303030303030302c00191b4578f29d8ce4093bc0bed3992ba0b66a883130fa9bca75f7a9670d15f732cd54"]) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x200000, 0x0) r1 = getpgrp(0x0) getresuid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) getgroups(0x2, &(0x7f0000000600)=[0xee00, 0xee00]) r4 = syz_open_dev$sndtimer(&(0x7f0000000740)='/dev/snd/timer\x00', 0x0, 0x200000) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000680)='/dev/vhost-net\x00', 0x2, 0x0) r6 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000700)={0x4, 0xffffffffffffffff, 0x1}) r8 = socket$rds(0x15, 0x5, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) r10 = syz_open_dev$evdev(&(0x7f0000001040)='/dev/input/event#\x00', 0x8, 0x200000) r11 = socket$inet6_udplite(0xa, 0x2, 0x88) r12 = openat$full(0xffffffffffffff9c, &(0x7f0000001080)='/dev/full\x00', 0x0, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000010c0)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in=@multicast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000001200)=0xe8) r15 = getegid() ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001240)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001280)={0x0, 0x0}, &(0x7f00000012c0)=0xc) r18 = getegid() r19 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001300)={{{@in6=@local, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001400)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000001440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r22 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r23 = userfaultfd(0x80000) r24 = socket$inet_tcp(0x2, 0x1, 0x0) r25 = openat$mixer(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/mixer\x00', 0x4000, 0x0) r26 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000001540)={&(0x7f0000001500)='./file0\x00', 0x0, 0x10}, 0x10) socketpair$inet6_dccp(0xa, 0x6, 0x0, &(0x7f00000007c0)={0xffffffffffffffff}) r28 = signalfd(0xffffffffffffffff, &(0x7f00000015c0)={0x7f}, 0x8) r29 = socket$inet(0x2, 0xa, 0x1ca) r30 = syz_open_dev$admmidi(&(0x7f0000001880)='/dev/admmidi#\x00', 0x2, 0x40a000) r31 = epoll_create(0x7f) r32 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f00000018c0)={0x28, 0x0, 0x2711, @any=0xffffffff}, 0x10, 0x80000) r33 = syz_open_dev$ndb(&(0x7f0000001900)='/dev/nbd#\x00', 0x0, 0x200000) r34 = socket$kcm(0x29, 0x0, 0x0) r35 = syz_open_dev$audion(&(0x7f0000001940)='/dev/audio#\x00', 0x40, 0x100) r36 = getpgrp(0xffffffffffffffff) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001980)={{{@in6=@ipv4, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@broadcast}}, &(0x7f0000001a80)=0xe8) stat(&(0x7f0000001ac0)='./file0\x00', &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r39 = socket$pppoe(0x18, 0x1, 0x0) r40 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r41 = socket$bt_hidp(0x1f, 0x3, 0x6) r42 = perf_event_open$cgroup(&(0x7f0000001bc0)={0x5, 0x70, 0x5, 0x4, 0x3, 0x315c, 0x0, 0xfff, 0x20002, 0xf, 0x0, 0x3, 0x0, 0x8, 0x64600e09, 0x2, 0x8, 0x1, 0x1, 0x324, 0x1, 0x1066f62f, 0x7, 0xffffffff, 0x1000, 0x81, 0x8, 0x7f, 0x3, 0x81, 0x4, 0x3, 0x1ff, 0x5, 0x0, 0x1000, 0xcf, 0x1f, 0x0, 0x0, 0x5, @perf_bp={&(0x7f0000001b80), 0x1}, 0x40, 0x4, 0x400, 0x4, 0x1, 0x5, 0x9}, 0xffffffffffffff9c, 0xe, 0xffffffffffffffff, 0x2) r43 = syz_open_dev$dmmidi(&(0x7f0000001c40)='/dev/dmmidi#\x00', 0x1779, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000001c80)={0xffffffffffffff9c}) r45 = signalfd(0xffffffffffffffff, &(0x7f0000001cc0)={0x7}, 0x8) r46 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000001d00)) r47 = socket$vsock_stream(0x28, 0x1, 0x0) r48 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r49 = socket$nl_netfilter(0x10, 0x3, 0xc) r50 = socket$nl_xfrm(0x10, 0x3, 0x6) r51 = eventfd(0x10000) r52 = openat$dir(0xffffffffffffff9c, &(0x7f0000001d40)='./file1\x00', 0x0, 0x8) r53 = socket$inet6(0xa, 0x7, 0x8) r54 = syz_open_dev$midi(&(0x7f0000001d80)='/dev/midi#\x00', 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000001dc0)={0x0, 0x0}) r56 = getuid() getresgid(&(0x7f0000001e00), &(0x7f0000001e40), &(0x7f0000001e80)=0x0) r58 = getpid() lstat(&(0x7f0000001ec0)='./file1\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000001f80)=0x0) getresuid(&(0x7f0000001fc0), &(0x7f0000002000)=0x0, &(0x7f0000002040)) r62 = getgid() sendmmsg$unix(r0, &(0x7f0000002200)=[{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000140)="dab207306922e889602e04e9569679445f56fffbd55e520c3d89e02be5081bf8100d160230da6f8d7bca388d15ef49704fd1226f50f8d6b597742506b18e53a8e9b2fc706a2786fefc1ffb0e22dc848200ecae24", 0x54}, {&(0x7f00000001c0)="50dcfd7bce2b5ee8799f1dbee3ae08825d8ac93454e610df82038ecf10038c11f338f1fd47ed61ebbd9c2290d680e616f0345dc973dcb7a1875395bab0755860c9411b2d1974a770c0f8b52642bc483901e08c6db33a187b732172a53d5739c26ab0fb9670f63d05794ec11593349067d69eb370bc9350fa4db37e4f869404839f780878d665ab26acc666d22d930daba66dfd7ecc21d2625c46829e347771d9c386aa40ce6b34b8837ae02423f7fe1c6f1e1bf2d3fa7fd519067439e0641d0e85e36f2624034e34758c62229826f362ef99a3c437436aa8bd0bced32de4ce7509a3732ecb9e57916794f61cea66c884", 0xf0}, {&(0x7f00000002c0)="1f93ca7de24085ef847b3012f5d8004cda178698d767d806684cf565fe1132cee9f7c74a65b941dafc1d12a8c92c5cf8a1b1ab59c51df54367198ab3d286da98536da2407bcf188017edc46cfb2a5d09cc9b8f949c9a27cca0ebc34cad1132aae3b259bfb9245a7621949f49dc688c1495353adf996b8491a6be03e773dbfca536d1981d4874b4f6c0b5860c314755dbacb7978d8971c74d9808d373f81028dcf9e4d515209f288d69d1245870fedced13df6635755a24a4b0a4750099a443e5f08ad4d07f02375c145aba870f8203f42391cacf8eda9efb4be80ee16e7b6d29e8aa4a135ddd", 0xe6}, {&(0x7f0000000400)="7d5e9becc03efdfa37268fe3782b61b24a16f0b5576caf4abb4cfc96cc7ff19e4acb9fd4c75044df743e24595c96955fa28bab9a34de62607bdf01dd2e50ac375c6748cac3511e6f58c923ac5280b151e8131f438239b9d7c3da3ec1490e8d44158988daaca83b720d787353cfce770232145d2f9481285a29c7aab170211d28b94f10be3cfdee2f25b1deb8a832c377340543a8cb39f25648e91c4bbe1c6e1261b6c190f96714eea37ebff9090610d78696366d23217bb3a520944e2e11c45d08497d2bd4c152440a12597c86e097ddb4ac8e6d9172de695bc61a7eb1e97c964aedfcaec304553f7c618012d6f850f971", 0xf1}], 0x4, &(0x7f0000001600)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000003806a6cb15cd487718bea6e723182912", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYRES32=r28, @ANYBLOB='\x00\x00\x00\x00'], 0xe8, 0x4}, {&(0x7f0000001700)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000001840)=[{&(0x7f0000001780)="8bee11aef8b4c09244c1cc6ffb6daf8c912926251e4575238deaec5a77d4309462960dc2e80362a67454bedbdf39bdbb6a792289c57f2805d300e3e4605a363287ac0e2c7df5d220f52b92f19c17c67ecd71e8f2a7645e4416e2aa7cd1b43f2d9c945a6df5e14e792bad22e8c37386b9b7c2d69615cb4f5b68d6987902254516434eee4effd4", 0x86}], 0x1, &(0x7f0000000800)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r29, @ANYRES32=r30, @ANYRES32=r31, @ANYRES32=r32, @ANYRES32=r33, @ANYRES32=r34, @ANYRES32=r35, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r36, @ANYRES32=r37, @ANYRES32=r38, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r39, @ANYRES32=r40, @ANYRES32=r41, @ANYRES32=r42, @ANYRES32=r43, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r44, @ANYRES32=r45, @ANYBLOB="18000e00272c0000001d010000000100f1b4cd9db124f1f49e4bfe8f1f933d157c435d691fe1fa1fd67b879561fca4b224191c54274d239bf098cd86912b97a1959d97c8cab969f7634b931825995caa4c8097f90096c7fae190bd41347d5f197ad741e6750a33ae97e97d60d6fc57359cfe68aa130c14443b5a18f72c96", @ANYRES32=r46, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r47, @ANYRES32=r48, @ANYRES32=r49, @ANYRES32=r50, @ANYRES32=r51, @ANYRES32=r52, @ANYRES32=r53, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r54, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r55, @ANYRES32=r56, @ANYRES32=r57, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r58, @ANYRES32=r59, @ANYRES32=0x0, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r60, @ANYRES32=r61, @ANYRES32=r62, @ANYBLOB='\x00\x00\x00\x00'], 0x150}], 0x2, 0x40) 16:38:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8947, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x1000000, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:32 executing program 6: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000040)='fou\x00') ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x80000001) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {0x1}, [@FOU_ATTR_AF={0x8, 0x2, 0xa}]}, 0x1c}, 0x1}, 0x0) 16:38:32 executing program 3: mmap$binder(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x2, 0x100000002132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xc812, r0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f0000001140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r1, 0x2, 0x70bd2b, 0x25dfdbfc, {0x1}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2bf64ca4bb30428a}, 0x40880) r2 = syz_open_dev$usbmon(&(0x7f0000001180)='/dev/usbmon#\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000011c0)={0x0, 0xff}, &(0x7f0000001200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000001240)={r3, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, [0x9, 0x3, 0x100000000, 0x100, 0x7, 0xeec, 0x0, 0x6, 0x3, 0xffffffffffff3cbb, 0x80000000, 0x2, 0x3f, 0x5, 0x3]}, &(0x7f0000001340)=0x100) getsockopt$netlink(r0, 0x10e, 0x9, &(0x7f00000000c0)=""/4096, &(0x7f0000000000)=0x1000) close(r0) 16:38:32 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x6000000000000001, 0x0) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:32 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000000)=ANY=[], 0xffffff94) syz_emit_ethernet(0x32, &(0x7f0000000cc0)={@link_local={0x1, 0x80, 0xc2}, @empty=[0x0, 0x0, 0x14], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @multicast1=0xe0000001}, @dccp={{0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, "d70502", 0x0, "f53475"}}}}}}, 0x0) set_robust_list(&(0x7f0000000100)={&(0x7f0000000080), 0x952c, &(0x7f00000000c0)}, 0x18) poll(&(0x7f0000000000)=[{}], 0x20000000000001e6, 0x0) [ 212.706352] netlink: 'syz-executor6': attribute type 2 has an invalid length. [ 212.729637] binder: BINDER_SET_CONTEXT_MGR already set 16:38:32 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x6000000000000001, 0x0) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:32 executing program 6: bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x194, 0x20000000001a}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7fffffff}, [@generic={0xd84, 0xfffffffffffffbcd, 0x9, 0x401}], {0x95}}, &(0x7f0000000240)="73010080001e000000", 0x1, 0xfb, &(0x7f00001a7f05)=""/251, 0x41f00, 0xfffffffffffffffc}, 0x48) [ 212.755005] binder: 12753:12763 ioctl 40046207 0 returned -16 [ 212.770114] syz-executor0 uses obsolete (PF_INET,SOCK_PACKET) 16:38:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5452, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:32 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") syz_read_part_table(0x0, 0x1, &(0x7f0000000280)=[{&(0x7f0000000000)="0200eeffffff01000000ff070000b177e0167fffffff", 0x16, 0x1c0}]) 16:38:32 executing program 7: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) ppoll(&(0x7f0000000200)=[{r1, 0x400}, {r1, 0x2020}, {r1}, {r2, 0x2}, {r2, 0x1}, {r0}, {r0, 0x300}, {r0, 0x1000}, {r0, 0x2048}], 0x9, &(0x7f00000002c0)={r3, r4+10000000}, &(0x7f0000000300)={0x6}, 0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000040)={0x0, 0x81}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r5, 0x400}, &(0x7f0000000100)=0x8) [ 212.812009] binder: BINDER_SET_CONTEXT_MGR already set [ 212.827276] binder: 12753:12763 ioctl 40046207 0 returned -16 16:38:32 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x7a00, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:32 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) r1 = socket(0x0, 0xf, 0x8000000000000007) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000000)={'mangle\x00', 0x36, "dcf82d3d815d2736894fa60a2666a6b65e8b553453125bd89d05bcac9b2447cbebef686175a48f01c1a2447a1213b14045d172d364ad"}, &(0x7f0000000080)=0x5a) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x11, &(0x7f0000000ff0)={0x1c2}, 0x1c2) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'syz_tun\x00', {0x2, 0x4e22}}) ioctl$PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f00000000c0)) 16:38:32 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x4020940d, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 213.275128] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.287708] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 213.297828] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 213.299588] binder: BINDER_SET_CONTEXT_MGR already set [ 213.307577] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.317665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.320284] binder: 12799:12805 ioctl 40046207 0 returned -16 [ 213.337500] Dev loop3: unable to read RDB block 1 [ 213.342551] loop3: AHDI p1 p2 [ 213.345829] loop3: partition table partially beyond EOD, truncated [ 213.354875] loop3: p1 start 4278648832 is beyond EOD, truncated [ 213.382605] Dev loop3: unable to read RDB block 1 [ 213.387571] loop3: AHDI p1 p2 [ 213.390970] loop3: partition table partially beyond EOD, truncated [ 213.397803] loop3: p1 start 4278648832 is beyond EOD, truncated 16:38:33 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x23, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, "c25885c912000000d41728619b00054c411c5aeca7829b9f4c45caadf3411397b71c408e0a36ff65a6181fb2e907e3dbc3242c18f3e3ae97d685a2b3284aac36", "0d8a3a23bce7464f360f4f97cec6174b5cf5e79b28d6c040c2982b69d458157e"}) 16:38:33 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet(0x2, 0x6000000000000001, 0x0) sendto$inet(r2, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r2, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:33 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x8010000400000084) bind$inet6(r0, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) shutdown(r0, 0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000925000)="e0", 0x1, 0x0, &(0x7f0000bb6000)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000f96000)={0x9}, 0xfe53) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r0) 16:38:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast2=0xe0000002, @loopback=0x7f000001}, 0xc) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f000043e000)={0x0, {{0x2, 0x0, @multicast1=0xe0000001}}}, 0x40) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 16:38:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x400000000000000, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:33 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f00000000c0)=0x14, 0x4) getsockname(r0, &(0x7f0000000040)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000100)=0x32) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000840)={0x0, 0x4}) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_id=0x0, &(0x7f0000000180)=0x4) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={r2, 0x2}, 0x8) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000140)={0x0, 0x16}) socket(0xb, 0x80000, 0x2) 16:38:33 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000280)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001000000b7050000000000006a0a00fe000000008500000012000000b7000000000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) perf_event_open(&(0x7f000025c000)={0x2, 0x41, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0xe, 0xc2, &(0x7f0000000080)="52d3814e7fffff3bad6c48eff04c", &(0x7f0000000380)=""/194, 0x4f7}, 0x28) socketpair$inet6_sctp(0xa, 0x5, 0x84, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001940)=[{&(0x7f0000000480)=""/239, 0xef}, {&(0x7f0000000580)=""/66, 0x42}, {&(0x7f0000000600)=""/170, 0xaa}, {&(0x7f00000006c0)=""/145, 0x91}, {&(0x7f0000000780)=""/70, 0x46}, {&(0x7f0000000800)=""/140, 0x8c}, {&(0x7f00000008c0)=""/107, 0x6b}, {&(0x7f0000000040)=""/53, 0x35}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f0000000140)=""/34, 0x22}], 0xa, 0x0, 0x0, 0x9}, 0x2) ioctl$sock_inet6_SIOCDELRT(r1, 0x890c, &(0x7f0000001a00)={@mcast2={0xff, 0x2, [], 0x1}, @dev={0xfe, 0x80, [], 0x16}, @empty, 0x8, 0x5ca, 0x2, 0x0, 0x8, 0x20000, r2}) [ 213.595512] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.608639] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.615191] bridge0: port 1(bridge_slave_0) entered forwarding state 16:38:33 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f3, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 213.816594] binder: BINDER_SET_CONTEXT_MGR already set 16:38:33 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000002c0)='/dev/usbmon#\x00', 0x2, 0x0) r2 = getpgrp(0xffffffffffffffff) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000000340)={{0x9, 0x0, 0xfffffffffffffffd, 0x101, "73797a3000000000000000000200", 0x741b8e2a}, 0x3, 0x0, 0xb16, r2, 0x6, 0x101, 'syz1\x00', &(0x7f0000000300)=["1d", '/dev/net/tun\x00', 'nr0\x00', 'nr0\x00', '/dev/snd/pcmC#D#c\x00', 'bdev\\vmnet0wlan0user\x00'], 0x3d, [], [0x1000, 0x9, 0xd60, 0x19]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000ac0)={0x53, 0xffffffffffffffff, 0x5e, 0x8, @scatter={0x6, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000480)=""/198, 0xc6}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000640)=""/226, 0xe2}, {&(0x7f0000000740)=""/87, 0x57}, {&(0x7f00000007c0)=""/114, 0x72}, {&(0x7f0000000840)=""/93, 0x5d}]}, &(0x7f0000000940)="91b6e7691db771318371fde6a9007a3b5f3a1d0ff478412ed1b4bae0c47adbb84e39c500bea09fdf519baa85f8bef7323e5c39dc30a8e31a31efd91f99ab8fab73103436fd666ae508f1ae53b55a2ee4ee5b8ec43fd144c6b3f4adefe155", &(0x7f00000009c0)=""/152, 0x7, 0x4, 0xffffffffffffffff, &(0x7f0000000a80)}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000080)={0x1, 0x1, [@link_local={0x1, 0x80, 0xc2}]}) r3 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x1e7d6559, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000100)={[], 0x0, 0x8, 0x100000000, 0x0, 0x100, 0x3000, 0x0, [], 0xd649}) 16:38:33 executing program 0: r0 = socket$inet(0x2, 0x200000002, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x600000, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r2, &(0x7f00000000c0)="c3644990902cf937d0cc26a60064d947df5eb5298282785d93f5938d1c3f6f7e67280fae65b9bfb57720157f2525194cd5b4a6ea9df66ee8ce75b05a148337bb8a49bbc2f385d51c7cf807a40d6e5aee180233daf64598e28de7b7cb6adcd1f770593abaf4b4fb7a8b44e5f3694348f32afe6710596d2841a3d5f21de80b678a9a67f89f83645ab434ba6bd2"}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000500)=@broute={'broute\x00', 0x20, 0x1, 0x220, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000080), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{{{0x11, 0x0, 0x0, "6e2a30456b886bc2165b41fe6900", 'yam0\x00', 'yam0\x00', 'veth1_t/_bond\x00', @link_local={0x1, 0x80, 0xc2}, [], @link_local={0x1, 0x80, 0xc2}, [], 0xb0, 0x160, 0x190, [@quota={'quota\x00', 0x18}]}, [@common=@dnat={'dnat\x00', 0x10, {{@link_local={0x1, 0x80, 0xc2}, 0xffffffffffffffff}}}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "17d122d4e27ebdf3b9dc569e338e2c551c2fc4a19597ba4c501c8b1f16fb7809c40aee86d9a0ef7981f4af1506f4fe16383d2afb577ed2bb6dd99f024b3f54ba"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}]}, 0x298) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000380)=@broute={'broute\x00', 0x20, 0x1, 0x200, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000500], 0x0, &(0x7f0000000040), &(0x7f0000000840)=ANY=[@ANYBLOB="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"]}, 0x3a9) 16:38:33 executing program 6: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000180)=""/126, &(0x7f0000000200)=0x7e) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f0000000040)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r1, 0x28, 0x6, &(0x7f0000000080), 0x10) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd0000001000010000050900fcff0000040e05a5", 0x58}], 0x1) 16:38:33 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x88) write$P9_RLOCK(r0, &(0x7f00000000c0)={0x8, 0x35, 0x2, 0x1}, 0x8) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xc}}}) r2 = socket$rds(0x15, 0x5, 0x0) listen(r2, 0x7f) clock_nanosleep(0x9, 0x0, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f0000000080)) fstat(r1, &(0x7f0000000200)) [ 213.842810] binder: 12847:12850 ioctl 40046207 0 returned -16 [ 213.859924] binder: BINDER_SET_CONTEXT_MGR already set [ 213.865849] binder: 12847:12850 ioctl 40046207 0 returned -16 16:38:33 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x6000000, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:33 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:33 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:33 executing program 5: r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x12000, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r2, 0x8250aea6, &(0x7f0000000080)=""/71) ioctl(r1, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000d4b000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}]}, 0x190) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000dbd000)={0x1, {{0xa}}, 0x1}, 0x90) [ 214.062952] kernel msg: ebtables bug: please report to author: Wrong len argument [ 214.135851] binder: BINDER_SET_CONTEXT_MGR already set [ 214.155244] binder: 12883:12889 ioctl 40046207 0 returned -16 [ 214.174905] binder: BINDER_SET_CONTEXT_MGR already set [ 214.181451] binder: 12883:12889 ioctl 40046207 0 returned -16 16:38:34 executing program 7: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x1, 0x0) ioctl$TCSETSF(r0, 0xc0046d00, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) setsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, r1}, 0x14) 16:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x74000000, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:34 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000080)=0x61) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x401, 0x600100) read(r0, &(0x7f0000000040)=""/11, 0xb) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000000)) ioctl$TCSETA(r2, 0x5437, &(0x7f0000000140)) 16:38:34 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x4000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x2, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000040)={0x4, r2}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000100)=0x0) migrate_pages(r4, 0x7f, &(0x7f0000000140)=0x5, &(0x7f0000000180)=0x30) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffd) syz_kvm_setup_cpu$x86(r3, r5, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="0f01cbd1042e0f019a0058d9f7640f0666b8d8a6ece50f23d00f21f86635000000060f23f8670f080fc7afc5000f20d86635200000000f22d80f0b", 0x3b}], 0x1, 0x0, &(0x7f00000000c0), 0x0) 16:38:34 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:34 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f0000000040)=""/180) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r0, r0, &(0x7f0000000000), 0x1) unshare(0x40000000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendfile(r0, r1, &(0x7f0000000180), 0x9) fcntl$getownex(r0, 0x10, &(0x7f00000001c0)={0x0, 0x0}) r3 = syz_open_procfs(r2, &(0x7f0000000140)='net/raw6\x00') read(r3, &(0x7f00000002c0)=""/184, 0xb8) 16:38:34 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40286608, 0x20000000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x800, 0x0) 16:38:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc020660b, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 214.691114] IPVS: ftp: loaded support on port[0] = 21 16:38:34 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 214.711675] binder: BINDER_SET_CONTEXT_MGR already set [ 214.719027] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1869768495 (only 16 groups) [ 214.720690] binder: BINDER_SET_CONTEXT_MGR already set [ 214.749561] binder: 12918:12926 ioctl 40046207 0 returned -16 16:38:34 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x4000000, &(0x7f00000000c0)=[@release={0x40046304}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 214.760262] binder: 12918:12928 ioctl 40046207 0 returned -16 16:38:34 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:34 executing program 0: r0 = syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, 0x7fffffff}) r1 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x5, 0x480) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='/dev/snd/timer\x00', r1}, 0x10) [ 214.846994] IPVS: ftp: loaded support on port[0] = 21 [ 214.855904] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 1869768495 (only 16 groups) 16:38:34 executing program 6: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x1, 0x10, 0x5, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000000), &(0x7f0000000080)}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r0, &(0x7f0000000000)="860cc5a6", &(0x7f0000000540)}, 0x20) 16:38:34 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x440, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="590000007a10be98b0ae5faf1d9b7b6bd77e48a6615132bcd07dd606b457df7999f0dd21502b6dd830838bb44358b8e4e38238f679efbb79b3afef96391997c7dc67f5b8a033b51923798b1e059c2608931a0100000000000000000000"], &(0x7f0000000100)=0x61) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x1000}, 0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x5c831, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0), &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) syz_open_procfs(0x0, &(0x7f0000000040)='syscall\x00') 16:38:34 executing program 7: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x3, 0x800000000000b) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000000c0)=@nat={'nat\x00', 0x19, 0x1, 0x200, [0x200002c0, 0x0, 0x0, 0x200002f0, 0x20000320], 0x0, &(0x7f0000000000), &(0x7f0000000500)=ANY=[@ANYBLOB="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"]}, 0x2b6) 16:38:34 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 215.064824] binder: BINDER_SET_CONTEXT_MGR already set [ 215.091576] binder: 12940:12946 ioctl 40046207 0 returned -16 [ 215.136471] binder: BINDER_SET_CONTEXT_MGR already set 16:38:34 executing program 0: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:34 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x400) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) sendmsg$nl_generic(r0, &(0x7f0000023000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1cecffff2600ff0a0000000000000000050000040001000000000000"], 0x1c}, 0x1}, 0x0) [ 215.184162] binder: 12940:12946 ioctl 40046207 0 returned -16 [ 215.194711] kernel msg: ebtables bug: please report to author: Wrong len argument [ 215.214646] kernel msg: ebtables bug: please report to author: Wrong len argument 16:38:35 executing program 3: unshare(0x64000400) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = eventfd(0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x0, r2, 0xffffff7f}) socketpair(0xe, 0x3, 0x1, &(0x7f0000000080)) 16:38:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8942, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:35 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vhost-net\x00', 0x2, 0x0) fcntl$lock(r0, 0xa, &(0x7f0000000300)) 16:38:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x400c630f}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:35 executing program 7: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x4, 0x84000) sendmmsg$alg(r1, &(0x7f0000002800)=[{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000680)="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", 0x1000}], 0x1, &(0x7f00000016c0)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0x30, 0x117, 0x2, 0x19, "3e63e3068ce4b02119cb6dd22a7ab128e44254967c3c02220b"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18, 0x117, 0x3}], 0x78, 0x8000}, {0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000001780)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}], 0x1048, 0x20000000}], 0x2, 0x40001) openat$cgroup_ro(r1, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x14, 0x27, 0x1, 0x0, 0x0, {0xa}}, 0x14}, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000180)={{0x6, 0x7, 0x2, 0x4, 'syz1\x00', 0x1}, 0x1, [0x778a, 0x40, 0x5, 0x9, 0x2, 0xfff, 0x100000000, 0x9, 0x8000, 0x501b, 0x42, 0xff, 0x3, 0x3127, 0x7fff, 0x3, 0x8000, 0x94f0, 0x7, 0x3ab0ddee, 0x20, 0x0, 0x5000000000000000, 0x10000, 0xfffffffffffffffa, 0x9, 0x800000000, 0x80, 0x1, 0xffffffff, 0x6, 0x2, 0x9, 0x5, 0x9, 0x40, 0x28000000000, 0x7fffffff, 0xfffffffffffffffd, 0x0, 0x0, 0xb0, 0x50edd6d8, 0x15b2, 0x100000000, 0x4, 0x6, 0x9, 0xa06, 0x689, 0x10000, 0x474, 0x6, 0x1, 0x6, 0x6, 0x9, 0x3ff, 0x8000, 0x0, 0xa5, 0x4, 0x5, 0x1, 0xffffffff, 0x80000000, 0xd95c, 0xff, 0xfffffffffffffffc, 0x8, 0x3, 0x0, 0x4, 0x4, 0x2, 0x5, 0xffffffffffffff81, 0x1, 0x8, 0x1f, 0x1, 0x5, 0x7, 0x80000001, 0x7ff, 0x6, 0x1, 0x7fff, 0x7, 0x6, 0x100, 0x54, 0x0, 0x0, 0x35a9, 0x1ff, 0x3, 0x4, 0x2, 0x0, 0x10, 0x8, 0x8, 0x2, 0x3, 0x8, 0x7, 0x5ed3f58c, 0xa69, 0x10000, 0xe1e, 0x2, 0x2, 0x7, 0x1, 0x8, 0x1ee, 0x0, 0x3ff, 0x9, 0x0, 0x10001, 0x9, 0x100000001, 0x1689cce3, 0x3f, 0x3, 0x2]}) 16:38:35 executing program 6: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x20000, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x40, 0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0x2}) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffffffff0c0700004500002800000000000090787f000001ac1414aa0000000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], &(0x7f0000000180)) getsockname$packet(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000100)=0x14) bind$packet(r1, &(0x7f0000000140)={0x11, 0x1f, r2, 0x1, 0x3, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x14) 16:38:35 executing program 0: capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000200)) r0 = socket$inet(0x10, 0x3, 0x9) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f000001e000)=[{&(0x7f0000000000)="24000000000b07031dff1f946fa2830020200a00090001004003ffffffeca3a20400ff7e", 0x24}], 0x1}, 0x0) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00') 16:38:35 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) socket$inet6(0xa, 0x1000000000002, 0x0) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:35 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000000)=ANY=[@ANYBLOB="410f34223e8fca6a2a3e94dccadc5ebe9618e21356ea94ae80afcf1c72776596dbc77881e55e3711af53c6b97a48c9a1775b485b3b309cd56b3bdb719865e9fac1da69f51ca7dcce15e8ea6a5bd4bc1586e5b8dd7c89b2f967377105207e6111d6a3ac6d8f9e551e52"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:38:35 executing program 6: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, "dbd495", 0x44, 0x11, 0x0, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, @empty, {[], @gre={{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x880b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd}, {0x8, 0x88be, 0x0, {{0x0, 0x1}, 0x1}}, {0x8, 0x22eb, 0x0, {{0x0, 0x2}, 0x2}}, {0x8, 0x6558}}}}}}}, &(0x7f0000000040)) 16:38:35 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000002600)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xffffffffffffffff) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000040)=0x0) prctl$setptracer(0x59616d61, r2) keyctl$restrict_keyring(0x1d, r0, 0x0, 0x0) r3 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x2, 0x20100) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000100)) 16:38:35 executing program 7: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snapshot\x00', 0x400000801, 0x0) write$binfmt_aout(r0, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], 0x800) writev(r0, &(0x7f0000001500)=[{&(0x7f0000001480)="ee", 0x1}], 0x1) 16:38:35 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8970, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 215.742497] binder: 12988:12992 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 215.751442] binder: 12988:12992 unknown command 0 [ 215.777695] binder: 12988:12992 ioctl c0306201 200002c0 returned -22 [ 215.819775] binder: BINDER_SET_CONTEXT_MGR already set [ 215.826232] binder: 12988:12992 ioctl 40046207 0 returned -16 [ 215.834127] binder: 12988:13001 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 215.834141] binder: BINDER_SET_CONTEXT_MGR already set [ 215.842678] binder: 12988:13001 unknown command 0 [ 215.862106] binder: 12988:13001 ioctl c0306201 200002c0 returned -22 16:38:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40106308}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 215.867339] binder: 12988:12992 ioctl 40046207 0 returned -16 [ 215.951991] IPVS: ftp: loaded support on port[0] = 21 16:38:35 executing program 5: r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000140)='irlan0\x00', 0xffffffffffffff9c}, 0x10) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f00000008c0)=@nat={'nat\x00', 0x19, 0x4, 0x518, [0x20000380, 0x0, 0x0, 0x200004c8, 0x20000650], 0x0, &(0x7f00000002c0), &(0x7f0000000c40)=ANY=[@ANYBLOB="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"]}, 0x673) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_INFO(r2, 0x0, 0x60, &(0x7f0000000200)={'filter\x00'}, &(0x7f0000000300)=0xe1) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth0\x00', &(0x7f0000000b40)=ANY=[@ANYBLOB="04000000000001005c00003913d200e42ce3f3950dbb3ebcb00d93d6929ecd47c5c031effa034a25190b9d0d76e80b07c9ad07d0f174f46c190702c9440c862059a2b366696822f6b24187c494fd3047609a352ba9d95b16eaf322fc71a78737a26e739545124914537c1fb2483ca18e83153edeee141281bdf75b1a7d93000000000000009900ec762b88c989deae58ea01425afb73c1339a894c4c1aa6b0c5dd6065e6148618f4489e4d9fbdf1eefd30b7281c5030bee11d5543b39573e72d4c50c97f17a0c2d73837971563c2f3663c462f9e3cf885ef179b7aaed24d06cef7b4669bcefe1a0ae7f686"]}) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f0000000a00)={0x7}) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000000c0)) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000000)={0x2, 'syz_tun\x00', 0x1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000940)={0xf, 0x4, 0x9, 0x1000, 0x4, r0, 0x100000000}, 0x2c) ioctl$BLKFRASET(r0, 0x1264, &(0x7f0000000100)=0x8) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) setsockopt$RDS_FREE_MR(0xffffffffffffffff, 0x114, 0x3, &(0x7f0000000340)={{0x1f, 0x1}}, 0x10) timer_create(0x3, &(0x7f0000000a40)={0x0, 0x3, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000a80)=0x0) timer_getoverrun(r3) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000009c0), 0x4) fcntl$setsig(r0, 0xa, 0x1b) ioctl$KVM_GET_DIRTY_LOG(r0, 0x4010ae42, &(0x7f0000000980)={0x10201, 0x0, &(0x7f0000ffc000/0x2000)=nil}) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000080)={0x1, 'irlan0\x00'}, 0x18) [ 216.163061] binder: 13021:13028 BC_INCREFS_DONE u4010630900000000 no match [ 216.170408] binder: 13021:13028 unknown command 0 [ 216.193290] binder: 13021:13028 ioctl c0306201 200002c0 returned -22 [ 216.216176] binder: BINDER_SET_CONTEXT_MGR already set [ 216.226709] binder: 13021:13028 ioctl 40046207 0 returned -16 [ 216.254210] binder: 13021:13032 BC_INCREFS_DONE u4010630900000000 no match [ 216.255172] binder: BINDER_SET_CONTEXT_MGR already set 16:38:35 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000000)='hybla\x00', 0x6) close(r3) dup3(r1, r2, 0x0) 16:38:35 executing program 0: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f0000000100)='./file1\x00', 0x40000000000001, 0x0, &(0x7f0000000400), 0xffffffffffffffff, &(0x7f0000000040)) 16:38:35 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891d, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:35 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) sendfile(r0, r1, &(0x7f0000000080)=0x8000000, 0x8) 16:38:35 executing program 3: socket$kcm(0xa, 0x7, 0x0) r0 = getpgid(0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) setpgid(r0, r1) 16:38:35 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 216.261517] binder: 13021:13032 unknown command 0 [ 216.273436] binder: 13021:13032 ioctl c0306201 200002c0 returned -22 [ 216.289117] binder: 13021:13028 ioctl 40046207 0 returned -16 [ 216.441910] IPVS: sync thread started: state = BACKUP, mcast_ifn = syz_tun, syncid = 1, id = 0 16:38:35 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000af5000)={0x1, &(0x7f00006dc000)=[{0x6, 0x0, 0x0, 0xa1}]}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000f59000), 0x4) sendto$inet(r0, &(0x7f0000000100), 0x0, 0x40010, &(0x7f0000deaff0)={0x2, 0x4e20, @loopback=0x7f000001}, 0x3) sendto$inet(r0, &(0x7f00005c8000)="c3401c344654f3c7d9fe1ba48c8e399aa4eedc3d6bd8ebd65c856a45d61154adc2b2a976fbffffffffffffff38e9dd18c58f6bd779650fc30f09000000ecf323c9f6502ceab47e58114347b289546465a5eb278de12b1989f64cc99412e36880d20c34d91051b22f6c8acc9d082b7bcdec844f667da0867d08d4154004997e317b79", 0x82, 0x81, &(0x7f0000e66000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) writev(r0, &(0x7f000042a000)=[{&(0x7f00001e3f5a)="2db4ff107e00a32a96ccd7785697535fe7e2d1cdf701f5079cde041c224ff8b177c81383265194f55b510ce5107c9164cfda3f99716d35b53be37a7b2a301f9d41650662b66dd4ffca8cf7641b6b5d4d65b9eb195c4666a99f69f89106ee3fc6c6d98f0afc8b4d26aacc19373135822e00f7982a4346d3b304cac13828ca5bede4cf", 0x82}], 0x1) write$binfmt_aout(r0, &(0x7f0000001340)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000db1c822aac5303a1ea1ee4b6e618ab6c32b69d2dfa57254c00cf8ef245ca30c7e888a642cae8924c3079cd7e44b4f8baadbfc06e049979d63fab6ce7dc2e93b1bb9e2bbecb9e4045fad326c87ec8b9c1"], 0x76) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000200)='^', 0x1}], 0x1) sendto$inet(r0, &(0x7f0000000000)='Q', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) shutdown(r0, 0x1) 16:38:35 executing program 4: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f0000000100)=0xc) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:36 executing program 7: r0 = syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x200, 0x0) read(r0, &(0x7f0000000140)=""/197, 0xc5) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) dup2(r2, r1) 16:38:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a2, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:36 executing program 0: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) [ 216.597047] binder: BINDER_SET_CONTEXT_MGR already set [ 216.607062] binder: 13064:13068 ioctl 40046207 0 returned -16 [ 216.622269] binder: 13064:13068 unknown command 0 [ 216.632173] binder: 13064:13068 ioctl c0306201 200002c0 returned -22 16:38:36 executing program 3: getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000100)=0xe8) ioprio_get$uid(0x3, r0) unshare(0x20000000) clone(0x38204000, &(0x7f00000005c0), &(0x7f0000000440), &(0x7f0000000580), &(0x7f0000000300)) 16:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40086303}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 216.667324] binder: 13064:13074 unknown command 0 [ 216.672957] binder: 13064:13074 ioctl c0306201 200002c0 returned -22 16:38:36 executing program 5: set_mempolicy(0x2, &(0x7f00000000c0)=0x7, 0x9) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x3, 0x20000) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={0xffffffffffffffff, &(0x7f0000000200)="4c33564bd238dd1f36fa7d079eba1553c7fdc4719eef7879a0fb202a986385cdc2be", &(0x7f0000000180)}, 0x20) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400, 0x0) ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000040)=0xe1a) r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") 16:38:36 executing program 4: fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8993, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 216.949670] binder: 13094:13095 BC_FREE_BUFFER u4010630900000000 no match [ 216.956809] binder: 13094:13095 unknown command 0 [ 216.961748] binder: 13094:13095 ioctl c0306201 200002c0 returned -22 [ 216.978767] binder: BINDER_SET_CONTEXT_MGR already set [ 216.985386] binder: 13094:13095 ioctl 40046207 0 returned -16 [ 217.016967] binder: 13094:13097 BC_FREE_BUFFER u4010630900000000 no match [ 217.016971] binder: BINDER_SET_CONTEXT_MGR already set [ 217.016988] binder: 13094:13095 ioctl 40046207 0 returned -16 [ 217.024223] binder: 13094:13097 unknown command 0 [ 217.040783] binder: 13094:13097 ioctl c0306201 200002c0 returned -22 16:38:36 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x1, 0x600) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x10000, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) syz_open_dev$rtc(&(0x7f0000000300)='/dev/rtc#\x00', 0x2, 0x10000) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x80000, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ppoll(&(0x7f0000000200)=[{r0}, {r1, 0x200}, {r2, 0x8000}, {r3, 0x3000}, {r4, 0x30}, {r5, 0x3012}], 0x6, &(0x7f0000000240)={0x77359400}, &(0x7f0000000280)={0x40000000400000}, 0x8) r6 = socket$inet6(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) syz_open_procfs$namespace(r7, &(0x7f0000000040)='ns/cgroup\x00') accept4$nfc_llcp(r4, 0x0, &(0x7f00000002c0), 0x80800) ioctl(r6, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r2, 0x28, 0x0, &(0x7f0000000340)=0x4, 0x8) creat(&(0x7f00000000c0)='./file0\x00', 0xef276374f8f015bb) chown(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) 16:38:36 executing program 0: r0 = userfaultfd(0x80000) fcntl$setlease(r0, 0x400, 0x1) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r2, 0x0, 0x48f, &(0x7f0000000140)={0xfd, @dev={0xac, 0x14, 0x14, 0x11}, 0x4e23, 0x1, 'lblc\x00', 0x20, 0x10001, 0x6b}, 0x2c) getpgrp(0x0) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000040)=""/144, &(0x7f0000000100)=0x90) 16:38:36 executing program 3: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PVERSION(r0, 0x80045700, &(0x7f0000000000)) readv(r0, &(0x7f0000000540)=[{&(0x7f00000001c0)}, {&(0x7f0000000200)=""/62, 0x3e}], 0x2) 16:38:36 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40486311}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x11, &(0x7f0000000100)=@req={0xffffffffffff8a79, 0x2, 0x27, 0x10000}, 0x10) write(r0, &(0x7f0000000140)="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", 0x1000) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x6, 0x408001) getsockname$inet6(r1, &(0x7f0000000040)={0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x1c) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000012c0)={'team0\x00', 0x0}) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000001300)={r2, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xe}}, 0x10) 16:38:36 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8990, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:36 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8913, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 217.427201] IPVS: set_ctl: invalid protocol: 253 172.20.20.17:20003 [ 217.448932] binder: 13122:13128 got transaction to context manager from process owning it [ 217.453368] IPVS: set_ctl: invalid protocol: 253 172.20.20.17:20003 [ 217.457379] binder: 13122:13128 transaction failed 29201/-22, size 0-0 line 2843 [ 217.477278] binder: BINDER_SET_CONTEXT_MGR already set [ 217.494063] binder: 13122:13128 ioctl 40046207 0 returned -16 [ 217.510531] binder_alloc: 13122: binder_alloc_buf, no vma [ 217.516261] binder: 13122:13135 transaction failed 29189/-3, size 0-0 line 2967 [ 217.524057] binder: BINDER_SET_CONTEXT_MGR already set [ 217.540011] binder: 13122:13128 ioctl 40046207 0 returned -16 [ 217.555328] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.562316] binder: undelivered TRANSACTION_ERROR: 29189 16:38:37 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x42, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000140)=0x54) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x40, 0x0) 16:38:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x7f95, 0x7, 0x2000}, 0x4) ioprio_set$uid(0x1, 0x0, 0x7fff) 16:38:37 executing program 7: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000140)=0x78, 0x4) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) socketpair(0x19, 0x0, 0x7f, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000300)={0x7ff, 0x59, 0x200}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000280)="025cc83d") sendto$inet(r0, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) write$binfmt_elf64(r0, &(0x7f0000001380)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000071ef4b80000400000000000000000000000000000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b6060000000000000300000000000000d0170000000000000000000000000000000000000000000000000000000000000000000000000000c67e9b790000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f5ffffffffffffff0000000000000000000000000000000000000000000000000000000000000004000000000000fcff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000"], 0x353) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f00000002c0)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f00000017c0)=ANY=[@ANYBLOB="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"], 0xcad) 16:38:37 executing program 0: r0 = socket$inet(0x2, 0x4000000000004001, 0x0) r1 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x2) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000000)=0xbb, 0x4) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='proc!vboxnet0}vboxnet0wlan0\'$eth0!\x00', 0xffffffffffffff9c}, 0x10) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f00000003c0)=0x800, 0x4) r3 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0xff, 0x80000) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000400)={0x8, 0x36b}) mmap$xdp(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x810, r3, 0x80000000) r4 = dup3(r1, r2, 0x80000) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r4, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r5, @ANYBLOB="20042dbd7000fddbdf250a0000000c7e24c7886a737f00030008000100010000003c000100080002003c0000000c0006006c626c63000000f0070008000200000008000b00736970000800060073680100020000000800000008000000400009000000000008000400010000000800070007000000140001000000000000000000000000000000000008000b000a00000008"], 0x9c}, 0x1, 0x0, 0x0, 0x4050}, 0x80) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) r6 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r6, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r7 = socket$alg(0x26, 0x5, 0x0) r8 = getpgid(0x0) lstat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000bc0), &(0x7f0000000c00), &(0x7f0000000c40)=0x0) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000c80)=0x0) r12 = getuid() fstat(r6, &(0x7f0000000cc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(r4, &(0x7f0000000dc0)={&(0x7f0000000440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000a40)=[{&(0x7f0000000680)="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", 0xfa}, {&(0x7f0000000580)="f7f4031a93807fd331022d982700630a2b34343be3e6d23a32ab587429776663b81c75eef38f430351dd0f4c8c8b2539434bf0dafd8a5ddcbf15bd2d63ce8a06453e718c3880752ec1ced0d9cf5fa9762b24c8ae74cf134eb08b927d9017dbefa06c0c126027d67e13f3f7541f0bfdeb852cf11c067d3a20d367d5dd6d277e51", 0x80}, {&(0x7f0000000600)="1ea2f30ca886457fdb75728f7622a6262166cd40f583d1e8d6add2185f391566810f69c6947a5f81b6683037be", 0x2d}, {&(0x7f0000000780)="b9d16ccc89b14090722ba4a64d3db9941389294c58a78ee8bc20140e640258fdd9448ac79c5d79a1064fcb9db979bf3c3a512a761a4f0bc9b144c2a3ba7c1bc2517994bca32910e49b96b824ba89aa603f7dff30cd82422592aafe4391f2a9fba9e7e85b425c8aca93b97e617ef6d38b26e5b1ab1444177a31965419d4e6672031", 0x81}, {&(0x7f0000000840)="eb2da2a1fbd22bdb26fa942557d68b4a2ccffdf4fc1cbbbc9cd24cc33570d13c7a6c99574bdd8abb02e9387b7b951e098fa1fe35301ce3a92713e01ce52e8b9c411503a8e375e0146329dbe452235011fed4ecfd75621e41e2c1", 0x5a}, {&(0x7f00000008c0)="7bd44512bf321c13f670c06b1d81f5901794ae9d3cb129231782785ef8c80809597a69b1911124c844559e", 0x2b}, {&(0x7f0000000900)="d7a0df6abfe01cb6da49f5bf1989811d79f20488a3408570ae9f3bed2b3d52b81a56b8344f335e0ca71c5c6a7ad8f268add3a227", 0x34}, {&(0x7f0000000940)="b77eea04e3982724f3b17426f15a49dd72326bbe91c3ebef1b8405660d0502789bdef1994802cc42d71a82eb8945447ae860821fa0bcfd2619c34ac3e4b4dfe74b2b4ea884f5e600e91d8052aac4f6ea00cfbcd322aa68074f7f3fe34d308435de44db9f951095a51600945343b8398b65bdfa40cb5a7875b2bb66f464afafd002ef62db31e088910c208d7699395b1c7e2b84195485f2c26c9f89621e2f42fd4e9c5cb1ab12329081106cc8a569ec607d923561dee2c74a90cac7f721b4e043226c4f00d9afa9ff0975d4b7a976668dc9d8688f38bb3caabe5f31c2250b5cdce69af0fb1d5c95f6f6a99b", 0xeb}, {&(0x7f0000001340)="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", 0x1000}], 0x9, &(0x7f0000000d40)=[@rights={0x18, 0x1, 0x1, [r4, r6]}, @rights={0x20, 0x1, 0x1, [r6, r6, r2]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}], 0x78, 0x1}, 0x1) bind$alg(r7, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'vmac(aes-asm)\x00'}, 0x58) r14 = accept4(r7, 0x0, &(0x7f0000000000), 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000200)="ad56b6c50400aeb995298992ea5400c2", 0x10) sendto(r14, &(0x7f0000000040)="bcaa197d32eac32b92fd21786ad75a2b9a81d61697dc9304cff909a5a818ed6a92e03ad9d2894bdc4c", 0x29, 0xc840, &(0x7f0000000380)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x80) sendmsg$alg(r14, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000500)="2185bc13006aa5ccde6f8c7989b289bbbda09ae73592095a65b1cfe5d8d9b1d8be8c310b57947fddd07090103cfb3ba7979e1d0417defec0447ae208800e703cc9bb4a491b58c1b362d624c07f5ffc47cf20e20133e0fd7fc8bd4b98f81be50602cd00ae5268d06c521a59eadbf341501fde3676fdb193b3fc291930bfab", 0x7e}], 0x1, &(0x7f0000000540)}, 0x80c0) recvfrom(r14, &(0x7f0000000e40)=""/126, 0x7e, 0x0, &(0x7f0000000300)=@nl=@proc={0x10}, 0x709000) sendto$inet(r0, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) connect(r0, &(0x7f00000012c0)=@nl=@unspec, 0xfffffe09) 16:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40486312}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:37 executing program 6: r0 = memfd_create(&(0x7f0000000000)="000002000000000000000cac22f2b6", 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = userfaultfd(0x0) set_mempolicy(0x3, &(0x7f00000000c0)=0xfffffffffffffff9, 0x800) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000f6bfe8)={0xaa}) accept4$inet(r0, &(0x7f0000000040)={0x0, 0x0, @remote}, &(0x7f0000000080)=0x10, 0x80000) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{}, 0x1000}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 16:38:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891e, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:37 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x40c200) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000100)={0x303, 0x33}, 0x4) getsockopt$inet6_int(r0, 0x29, 0xcf, &(0x7f0000000040), &(0x7f0000000080)=0x4) write$P9_RMKNOD(r1, &(0x7f00000006c0)={0x14, 0x13, 0x2, {0x3, 0x1, 0x4}}, 0x14) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000005480)="e180db4e3b23cdde4c4bca5351a6904cf9b043d46ee6610d0c6ab50da7d7a8b1", 0x20) r2 = accept4(r0, 0x0, &(0x7f0000000000)=0xfffffffffffffcbe, 0x0) preadv(r1, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/151, 0x97}, {&(0x7f00000003c0)=""/247, 0xf7}, {&(0x7f00000004c0)=""/213, 0xd5}, {&(0x7f00000005c0)=""/254, 0xfe}, {&(0x7f0000000140)=""/28, 0x1c}], 0x5, 0x0) recvmmsg(r2, &(0x7f0000006480)=[{{&(0x7f0000003300)=@nfc_llcp, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000006540)=""/4096, 0x1000}], 0x1, &(0x7f0000003380)=""/81, 0x51}}], 0x1, 0x0, &(0x7f0000001d00)={0x77359400}) 16:38:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000000c0)={'security\x00', 0x51, "d736e9c35c11e8166cdc7685178cedf50c33193697afa2975992733fd14e28ea09358448b7ac9ca0048ba835257b3bd2e6a11140c51ff138d33049ba77cb7e2238d0d58607cf03197d9a8260e7aaa723a4"}, &(0x7f0000000040)=0x75) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000d12000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x80, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0x10000) poll(&(0x7f0000000080)=[{r1, 0x100}], 0x1, 0x4) 16:38:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x48a}]}) fgetxattr(r2, &(0x7f0000000040)=@known='security.selinux\x00', &(0x7f0000000080)=""/226, 0xe2) 16:38:37 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 217.882524] binder: 13159:13165 got reply transaction with no transaction stack [ 217.890089] binder: 13159:13165 transaction failed 29201/-71, size 0-0 line 2759 [ 217.910624] binder: BINDER_SET_CONTEXT_MGR already set [ 217.917541] binder: 13159:13165 ioctl 40046207 0 returned -16 [ 217.941348] binder: 13159:13166 got reply transaction with no transaction stack [ 217.948973] binder: 13159:13166 transaction failed 29201/-71, size 0-0 line 2759 [ 217.952566] binder: BINDER_SET_CONTEXT_MGR already set [ 217.963105] binder: 13159:13165 ioctl 40046207 0 returned -16 [ 217.973442] binder: undelivered TRANSACTION_ERROR: 29201 [ 217.979839] binder: undelivered TRANSACTION_ERROR: 29201 16:38:37 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x630d}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:37 executing program 3: mkdir(&(0x7f0000000240)='./file0\x00', 0x100) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001fec)={0x5, 0x84, 0xff, 0x1}, 0x14) mmap(&(0x7f000000d000/0x1000)=nil, 0x1000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) bpf$BPF_GET_MAP_INFO(0xc, &(0x7f0000000080)={r2, 0x28, &(0x7f000000c000)}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000280)={r0, r1}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x20, &(0x7f00000000c0)={@empty, @empty, 0x0}, &(0x7f0000000100)=0xc) r4 = getuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000140)={{{@in6=@loopback={0x0, 0x1}, @in, 0x4e23, 0x0, 0x4e23, 0x9, 0x0, 0xa0, 0x80, 0x87, r3, r4}, {0x8, 0x3, 0x0, 0x6, 0x9, 0x8000001, 0x80000000, 0x9}, {0x80000001, 0x2907, 0x1ff, 0x43d}, 0x800, 0x6e6bb0, 0x1, 0x0, 0x3, 0x2}, {{@in6=@mcast2={0xff, 0x2, [], 0x1}, 0x4d4, 0x33}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x3501, 0x0, 0x3, 0x1, 0x0, 0x7, 0xffffffffffff8000}}, 0xe8) [ 218.184010] binder: 13194:13199 unknown command 0 16:38:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$binder(&(0x7f0000000780)='/dev/binder#\x00', 0x0, 0x2) r2 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000f80)='/dev/hwrng\x00', 0x12800, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffff9c, 0x84, 0x13, &(0x7f0000000fc0)={0x0, 0xfff}, &(0x7f0000001000)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000001040)={r4, 0x6}, &(0x7f0000001080)=0x8) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000580)='/dev/snapshot\x00', 0x2001, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r5, 0x4018ae51, &(0x7f00000005c0)={0x2, 0x7, 0x4}) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r2, 0x0) r6 = syz_open_dev$usbmon(&(0x7f0000000500)='/dev/usbmon#\x00', 0x6, 0x2) ioctl$KVM_DIRTY_TLB(r6, 0x4010aeaa, &(0x7f0000000a80)={0x3, 0x8}) r7 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000bc0)='/dev/mixer\x00', 0x1800003000b, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000006c0)={&(0x7f0000000680)='./file0\x00', r6}, 0x10) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r7, &(0x7f00000002c0)={0x15, 0x110, 0xfa00, {r8, 0x8, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0x8001, @dev={0xfe, 0x80, [], 0x18}, 0xa8d}, @in6={0xa, 0x4e23, 0xfffffffffffffffa, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x118) r9 = socket(0x3, 0x80007, 0x3ff) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000700)={'syzkaller0\x00', {0x2, 0x4e24, @loopback=0x7f000001}}) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000840)='IPVS\x00') sendmsg$IPVS_CMD_GET_DEST(r7, &(0x7f0000000a00)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000880)={0x118, r10, 0x300, 0x70bd2d, 0x25dfdbff, {0x8}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2={0xff, 0x2, [], 0x1}}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x9}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x5}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x2}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x10000}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote={0xac, 0x14, 0x14, 0xbb}}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7f}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xffffffffffffff7f}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x100000001}, @IPVS_CMD_ATTR_SERVICE={0x48, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x36}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x4}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x2}]}]}, 0x118}, 0x1, 0x0, 0x0, 0x40844}, 0x84) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000007000)={0x4, 0x0, &(0x7f0000005fd4)=[@acquire_done={0x40486311}], 0x0, 0x0, &(0x7f0000002000)}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r9, 0x114, 0xa, &(0x7f0000000540)=ANY=[@ANYBLOB="03a932d860"], 0x4) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x1, 0x0, &(0x7f0000000040)="b0"}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r7, 0x84, 0xf, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24}}, 0x7, 0x8001, 0x8, 0x8, 0xd9}, &(0x7f00000001c0)=0x98) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000c40), &(0x7f0000000b80)=0xfffffffffffffeed) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000200)={r11, 0x100, 0x4a, 0x6, 0xc5, 0x32}, &(0x7f00000004c0)=0x14) setsockopt$bt_hci_HCI_FILTER(r7, 0x0, 0x2, &(0x7f00000007c0)={0x0, 0x925, 0x8, 0x5}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000000)={0x0, 0x1, 0x5000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000240)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), &(0x7f00000000c0)}, 0xe001}}], 0x0, 0x0, &(0x7f0000000440)}) 16:38:37 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8948, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 218.206349] binder: 13194:13199 ioctl c0306201 200002c0 returned -22 [ 218.241518] binder: BINDER_SET_CONTEXT_MGR already set [ 218.250788] binder: BINDER_SET_CONTEXT_MGR already set 16:38:37 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") sendmsg(0xffffffffffffffff, &(0x7f00000037c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback=0x7f000001}}}, 0x80, &(0x7f0000002440)=[{&(0x7f0000000240)="bfe071203175a40eff946ddbad371ad5e756586b14a188aa91d725959395e5717ecfeaf0a41c636dde6de2f8c8a140cc0bebf94949bd65da4fbc03d9751af5deb1d64d7bcf2239d3f40fe157dff936161eae699f98502d4bd888c3ad23a465b7a856f59f27767f26f3777fd2caa6ec0e9553ab00375b8ba2c53f21b6b162d63ce92167d05a0528b0af119d512aa6a193adb3ae10f88dafdacb6c7d175f52c2dff43a3100c9798e46b35a91cdfe0ada7cf3f70afb8735521a38551d3e41fb7cb1d8058c65ae9f396d", 0xc8}], 0x1, &(0x7f00000024c0)}, 0x0) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0xf6) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(r1, 0x227c, &(0x7f0000000200)) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0x98, 0xfffffffffffffffb, 0xffffffffffff8661, 0x3, 0x4, 0x81, 0x1, 0x2, 0x0, 0x4, 0x80000001}, 0xb) 16:38:37 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 218.255568] binder: 13194:13199 ioctl 40046207 0 returned -16 [ 218.272899] binder: 13194:13205 unknown command 0 [ 218.291549] binder: 13194:13204 ioctl 40046207 0 returned -16 [ 218.298430] binder: 13194:13205 ioctl c0306201 200002c0 returned -22 16:38:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)) r1 = socket$inet6_sctp(0xa, 0x40000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000961fe4)=[@in6={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x100000001}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x7c, &(0x7f000095cffe)={r2}, &(0x7f000095c000)=0x8) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r4 = syz_genetlink_get_family_id$team(&(0x7f00000000c0)='team\x00') accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000200)=0x14) accept$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0x14) accept4$packet(0xffffffffffffff9c, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000340)=0x14, 0x80800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@remote}}, &(0x7f0000000480)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000000740)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000700)={&(0x7f0000000500)={0x1dc, r4, 0x8, 0x70bd27, 0x25dfdbfc, {0x2}, [{{0x8, 0x1, r5}, {0xf4, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xffffffff80000001}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x77ba169}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r8}}}]}}, {{0x8, 0x1, r9}, {0xc4, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x1c, 0x4, [{0x6, 0x7, 0x81, 0x8}, {0x77, 0x497, 0x8, 0x1}, {0x8, 0xeb, 0x7, 0x1}]}}}]}}]}, 0x1dc}, 0x1, 0x0, 0x0, 0x800}, 0x800) 16:38:37 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000300)="025cc83d6d345f8f762070") perf_event_open(&(0x7f00000002c0)={0x2, 0x70, 0xcd, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x2000, 0x0) setsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@int=0x3, 0x4) [ 218.472835] sg_write: data in/out 1832492938/204 bytes for SCSI command 0x0-- guessing data in; [ 218.472835] program syz-executor5 not setting count and/or reply_len properly [ 218.515482] binder: 13209:13213 transaction failed 29189/-22, size 0-0 line 2852 16:38:38 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0xe004, 0x1, &(0x7f0000000380)=[{&(0x7f0000010000)="eb3c906d6b66732e66617400020401000200027000f8", 0x16}], 0x0, &(0x7f0000000340)=ANY=[]) r0 = open(&(0x7f0000032ff8)='./file0\x00', 0x0, 0x0) syz_open_dev$audion(&(0x7f0000000300)='/dev/audio#\x00', 0x6, 0x40) syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000000c0)="2e2f66696c653c2c66696c65308c00", 0x10000, 0x2, &(0x7f0000000280)=[{&(0x7f0000000200)="45e531d32982e365fdbdb938cd3fcfbefc83fe02e2dd92dbd60a2a634a69c2364ce1e952ec5308b0d3b4c2a60de2f382435f5c23ea19f22cf31b14486b041ed30bc31a3987d902695edf6570076b45643231c7e306d069df9e9c0a46b3f0bff53359", 0x62, 0x8}, {&(0x7f0000000140)="8f6dcae15cc4c2b13f0094f3541e19879a8371f8d20136ac34ef572bebf82e8e1151dc40fea0bad9cbbe304b928c22a3e323e8d938bf323cdde6", 0x3a}], 0x1200000, &(0x7f00000002c0)={[{@shortname_win95='shortname=win95', 0x2c}, {@numtail='nonumtail=0', 0x2c}, {@nonumtail='nnonumtail=1', 0x2c}]}) mkdirat(r0, &(0x7f0000000040)="2e2f66696c653c2c66696c65308c", 0x40) 16:38:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40086310}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:38 executing program 5: r0 = socket$inet6(0xa, 0x4, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0x8) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x101000, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) ioctl$TCSETAF(r2, 0x545d, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xf800, 0xb3}) 16:38:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a3, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:38 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x9, &(0x7f00000001c0)="025c0000000000000470b678b2a0edb221115e073970c9c81eee44f529cac762b38bb082929d4662588867b45fc927ca3fd45418d3aa6f154c2ac87351523d627f6eecbed677441b2b85909f53d507e8df835e8366b12744609563b0e268d470fb9636bff514389a4bf1f396f7dc9928025690427cb5a9d87e58e3c32368c16b8d89e4b435c35d43b4ceaf7ce075c18cc305784c0708000000c52fd5ba678486a39f43e8f6fd4a121443ca128f6c46") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}}, 0xb6, 0x8000000000000000, 0x5, 0x8000, 0x1}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x5, 0x3}, 0x90) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r4, 0xc008ae88, &(0x7f00000004c0)={0x7b, 0x0, [0x40000105]}) [ 218.967759] binder: BINDER_SET_CONTEXT_MGR already set 16:38:38 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8922, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getitimer(0x1, &(0x7f0000000240)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) ptrace$poke(0x5, r3, &(0x7f0000000100), 0x7) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r5 = accept$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000180)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000340)={0x0, @local, @broadcast}, &(0x7f00000003c0)=0xc) getpid() sendto$packet(r5, &(0x7f00000001c0)="bf30e7e704c569fd022c23545f7a501f92a07ab430b6c2ca2508157908194e17df6c5b292efc85ec44e0d834c278b9fde8b4de74b2aed4fa3e1a79001d55e17c81ed03e2", 0x44, 0x8004, &(0x7f0000000400)={0x11, 0x10, r6, 0x1, 0x8001, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) ioctl$KVM_ENABLE_CAP_CPU(r4, 0x4400ae8f, &(0x7f0000000080)) [ 219.005145] binder: 13252:13256 ioctl 40046207 0 returned -16 [ 219.034260] binder: BINDER_SET_CONTEXT_MGR already set [ 219.049240] binder: 13252:13256 ioctl 40046207 0 returned -16 [ 219.063917] binder: 13252:13256 BC_DEAD_BINDER_DONE 4010630900000000 not found [ 219.071504] binder: 13252:13256 unknown command 0 [ 219.083390] binder: 13252:13256 ioctl c0306201 200002c0 returned -22 [ 219.096373] binder: BINDER_SET_CONTEXT_MGR already set [ 219.108212] binder: 13252:13256 ioctl 40046207 0 returned -16 [ 219.117339] binder: BINDER_SET_CONTEXT_MGR already set [ 219.118097] binder: 13252:13267 BC_DEAD_BINDER_DONE 4010630900000000 not found [ 219.130193] binder: 13252:13267 unknown command 0 [ 219.130507] binder: 13252:13256 ioctl 40046207 0 returned -16 16:38:38 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046359}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 219.180954] binder: 13252:13267 ioctl c0306201 200002c0 returned -22 [ 219.214574] binder: 13209:13274 transaction failed 29189/-22, size 0-0 line 2852 [ 219.293761] ip6_vti0: Invalid MTU 536871552 requested, hw max 65495 [ 219.313864] ip6_vti0: Invalid MTU 536871552 requested, hw max 65495 [ 219.412235] binder: BINDER_SET_CONTEXT_MGR already set [ 219.432453] binder: 13288:13294 ioctl 40046207 0 returned -16 [ 219.435296] binder: BINDER_SET_CONTEXT_MGR already set [ 219.454569] binder: BINDER_SET_CONTEXT_MGR already set [ 219.459376] binder: 13209:13295 ioctl 40046207 0 returned -16 [ 219.468753] binder: 13288:13294 ioctl 40046207 0 returned -16 [ 219.470818] binder: 13209:13274 transaction failed 29189/-22, size 0-0 line 2852 [ 219.482673] binder: 13288:13294 unknown command 1074029401 [ 219.492909] binder: 13288:13294 ioctl c0306201 200002c0 returned -22 [ 219.511532] binder: BINDER_SET_CONTEXT_MGR already set [ 219.521927] binder: 13288:13294 ioctl 40046207 0 returned -16 16:38:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = inotify_init1(0x8417e41ea35abb41) poll(&(0x7f0000000000)=[{r1}], 0x1, 0x1) 16:38:38 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x2000000003e5, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/49}) 16:38:38 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x3, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000040)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000180)=ANY=[@ANYBLOB="08e09a0f01c3"]) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:38:38 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 219.528533] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.530607] binder: 13288:13302 unknown command 1074029401 [ 219.534126] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.539947] binder: BINDER_SET_CONTEXT_MGR already set [ 219.555255] binder: 13288:13302 ioctl c0306201 200002c0 returned -22 [ 219.560887] binder: undelivered TRANSACTION_ERROR: 29189 [ 219.562432] binder: 13288:13294 ioctl 40046207 0 returned -16 16:38:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89b1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:39 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x80003, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000004c0)={@loopback={0x0, 0x1}, 0x800, 0x0, 0x2, 0x1}, 0x20) r1 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@loopback={0x0, 0x1}, 0x800, 0x2}, 0x20) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x0}) 16:38:39 executing program 0: r0 = gettid() perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sg(&(0x7f0000797ff7)='/dev/sg#\x00', 0x0, 0x0) ioctl(r1, 0x20000000005382, &(0x7f0000000000)) 16:38:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x630b}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:39 executing program 7: pkey_alloc(0x0, 0x3) r0 = openat$md(0xffffffffffffff9c, &(0x7f0000000000)='/dev/md0\x00', 0x0, 0x0) ioctl$BLKALIGNOFF(r0, 0x127a, &(0x7f0000000080)) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)) 16:38:39 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) socket$pppoe(0x18, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) dup2(r1, r0) 16:38:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8931, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:39 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_config_ext, 0x0, 0xfffffffffffffffc}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) ioprio_set$uid(0x1, 0x0, 0x7fff) clone(0x0, &(0x7f0000000140), &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)) flock(r0, 0x5) 16:38:39 executing program 6: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000200)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}}], 0x1c) r0 = socket$inet6(0xa, 0x4, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="2957e1311f16f477671070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000000)={0x0, 0x401}) ioctl$TCSETS(r1, 0x40045431, &(0x7f00005befdc)) r2 = syz_open_pts(r1, 0x20201) write(r2, &(0x7f0000000140), 0x28d) [ 219.792510] binder: 13321:13327 ERROR: BC_REGISTER_LOOPER called without request [ 219.800197] binder: 13321:13327 unknown command 0 [ 219.812661] binder: 13321:13327 ioctl c0306201 200002c0 returned -22 [ 219.823072] binder: BINDER_SET_CONTEXT_MGR already set [ 219.828578] binder: 13321:13327 ioctl 40046207 0 returned -16 16:38:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046307}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:39 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x10d, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x200000000000000, 0x0, 0x3, 0x0, 0x3f}, 0xfffffffffffffdac) [ 219.842849] binder: BINDER_SET_CONTEXT_MGR already set [ 219.842859] binder: 13321:13330 ERROR: BC_REGISTER_LOOPER called without request [ 219.842875] binder: 13321:13330 unknown command 0 [ 219.848960] binder: 13321:13327 ioctl 40046207 0 returned -16 [ 219.856497] binder: 13321:13330 ioctl c0306201 200002c0 returned -22 16:38:39 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000040)={'dummy0\x00', {0x2, 0x4e21}}) ioctl$KVM_ENABLE_CAP_CPU(r3, 0x4008ae89, &(0x7f0000000380)={0x7b, 0x0, [0x4b564d03, 0x1, 0x48, 0x1], [0x0, 0xd004]}) 16:38:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r1 = memfd_create(&(0x7f00000000c0)="237d00d3fc1ee4671fbaa0a455e73e678b8e96f7fd829d4d39f1828ebf765e220913b73db94f6d495077a6df5ab82b4c4f8d", 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040)=0x5, 0x4) ftruncate(r1, 0x40001) ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000000)='\x00') fallocate(r1, 0x2, 0x1, 0x964) sendfile(r0, r1, &(0x7f0000000400), 0x1b) 16:38:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8933, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 220.080562] binder: 13352 invalid dec weak, ref 715 desc 0 s 1 w 0 [ 220.087241] binder: 13352:13361 BC_ACQUIRE_DONE node 716 has no pending acquire request 16:38:39 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = inotify_init() r2 = dup3(r0, r1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000240)={'bond_slave_1\x00', &(0x7f00000001c0)=@ethtool_gstrings={0x1b, 0x100000001}}) ioctl$GIO_UNIMAP(r2, 0x4b66, &(0x7f0000000200)={0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}) io_setup(0xb222, &(0x7f0000000000)=0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000280)='/proc/self/net/pfkey\x00', 0x240, 0x0) io_cancel(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2, 0x7ff, r0, &(0x7f0000000040)="c094fffd532a7cd3817dc2b0349150b30225164c99503ccdd8a7894a1298e6dfebff028c8ff087637eb0de8090b93ad3b00721466eb5217a5f5a091435423c2fd654f4b3ec1bec1f3dc89cb257376baef17dcb8d6a0402dda65228bb2fc998fe5b1bb14a2a85e9fdf0c93cd9f34320aca60620fad4b24a502879766f6375231236116539e38e7bc4720c01f1eb8820256c23bf982af42c790bee", 0x9a, 0x9, 0x0, 0x1, r2}, &(0x7f0000000180)) 16:38:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:39 executing program 6: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x402, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000080)={{0x7, 0xfffffffffffffffb}, 'port1\x00', 0x20, 0x20000, 0x100000001, 0x2, 0x81, 0x0, 0x3f, 0x0, 0x5}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)="2f70726f632f2f6e657400000000000000072f6578706972655f6e6f646573b14a8874745f63", 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x200000, 0x0) [ 220.214806] binder: BINDER_SET_CONTEXT_MGR already set 16:38:39 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x4400, 0x0) ioctl(r0, 0x8000000001009375, &(0x7f0000006f80)="010000000000000018") 16:38:39 executing program 3: arch_prctl(0x1003, &(0x7f0000000000)="66d0333b908f42ca") r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x2, &(0x7f0000000280)="025c050000000000000070") getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6}}, &(0x7f0000000040)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)) r2 = getgid() fchown(r0, r1, r2) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000007c0)='/dev/vsock\x00', 0x400, 0x0) lsetxattr(&(0x7f0000000980)='./file0\x00', &(0x7f0000003f40)=@known='com.apple.FinderInfo\x00', &(0x7f0000004040)='uid', 0x3, 0x3) r4 = socket$inet(0x10, 0x3, 0xc) sendmsg$key(r3, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000003f80)={0x2, 0x14, 0x3cf9, 0x9, 0x18, 0x0, 0x70bd26, 0x25dfdbff, [@sadb_x_filter={0x5, 0x1a, @in6=@local={0xfe, 0x80, [], 0xaa}, @in=@multicast1=0xe0000001, 0x5, 0x4, 0x4}, @sadb_spirange={0x2, 0x10, 0x4d6, 0x4d3}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x6e6bba, 0x2, {0x6, 0x3c, 0x100, 0x8001, 0x0, 0x9, 0x0, @in6=@local={0xfe, 0x80, [], 0xaa}, @in6}}, @sadb_ident={0x2, 0xa, 0x4f, 0x0, 0xfffffffffffff5ac}, @sadb_x_filter={0x5, 0x1a, @in6=@mcast2={0xff, 0x2, [], 0x1}, @in6=@ipv4={[], [0xff, 0xff]}, 0x2, 0x10}]}, 0xc0}, 0x1}, 0x8c0) syz_mount_image$ntfs(&(0x7f00000000c0)='ntfs\x00', &(0x7f00000002c0)='./file0\x00', 0x4, 0x6, &(0x7f0000000700)=[{&(0x7f0000000300)="fe6e8866584dc2efb0cc6f09091e11173416d30d2d67bb4d4ef58ce02b7c199b8daad90ba2992e8197789ea740a8573922e49b5d72797654618d20a2c96fd00af9b4a8d978cc0374aaf870800fc60dc6243e7d80b24506981ae0e88823b1986ce5934d0678fb282dd4492c63079aa3191df5c2b3a6bf15ab09227404bbfb9368ff42cb9ba88bc99ea16ef2578e1812ca48a55f65229521c0985398d4941ad5dce4cad768a772c110801e4a1afdea6bf829d78d18785d5a4f6ceb3c8832d474a9f1668ab5f6247bb1296e0bab96418a14f59cc968252f77fe63de2ccfa8ca56ef2e0dfdef37d126b6aa60b685037b89d5ceaac32519a0", 0xf6, 0x100000001}, {&(0x7f0000000400)="4d77daeefa41b5b33885855a4c5edb795fd65af8fa7947ebb9434b1ac2b2b32ef982017efd", 0x25}, {&(0x7f0000000440)="9c6f073047875a16fda9c9a163a7b7c4b752e9cae26f10", 0x17, 0x6}, {&(0x7f0000000480)="f8c7801b0cc2eacd02f68f00b2a5550d5ec72fc62a69f24020c7a638f88cda57bf6a548f8258c8b36f2bac7a31f04d630e9d1b5584a44a6bc947bbeef5bbd9ed34fe05be7c6f67529789137265524a0ea6705991ad0156935412a2b87e72b47a82ea7165e119ac50c00f9d3ae078959966be771cd31320aea72a8ad63fe132c9312448a39a4da981fed94f3633628d39a0d15fc1cc3cd65bc4c67758923b35864d7a77a6d2ccf154f85efc72ad5a373f38f7eae6f145c7cda8db76a242484ba7948f5185593847", 0xc7, 0x4d2}, {&(0x7f0000000580)="87c514af038a0671cf2996b7289976b1c1d9935700986a1ede98f86414ec3875600562f918a635628cacae5b546905e1ef745001b3b5139d0457d8e267974004aea586257d2704c2c3", 0x49, 0x8}, {&(0x7f0000000600)="18fc0f939fd03487045854dd794626f495a50d60e170aed5e14ffdd68586d48a7ce4a615bafcc44da2a4ec2c574c68344f41968c256146de385c903dbc4cdd1e4d825068c911bdc7645a79511f3831b8bb139dca59ee04ca44bda6a2ea405873bdc63b07a480daadc4c7c4204d8ae5a147753a47bca756493de9fe1b1ad1dbed57d8424052185b55e9260d6bd7bdb5d15747e6ce0f7b66e6c731dc28d3da54cdf850b8153400ee3032c6d2b203bbbba5a5f7007b8e0d8b0cbb2659459107c1c938fab0331f5b99cc9186c5c55f1f4ec8edaf25b7bf27a862c00d0da6f5544cbd5e2c0a66187f1b21bf385a5672806d0964f4d4", 0xf3, 0x3f}], 0x4800, &(0x7f0000003e80)=ANY=[@ANYBLOB="6d66745f7a6f6e655f6d018000000000dcd7723d3078303030303030303030303030303030312c666d61736b3d30303030313737302c7569643d", @ANYRESHEX=r1, @ANYBLOB="2c646d61736b3d3030303030303030303030303030303030303030303032225c728fb147125f5fef09b2c16fae726f72733d7265636f7665722c636173655f73656e7369746976653d6e6f2c0003a036f3629572bd389e5c77ed012ca3075b07ea9e104333cb2ef5f861b64be16469008a9b1d"]) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000070a07041dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000008c0)={&(0x7f0000000880)='uid', 0xffffffffffffff9c}, 0x10) sendmsg$nfc_llcp(r5, &(0x7f0000003e40)={&(0x7f0000000900)={0x27, 0x1, 0x0, 0x7, 0x2, 0x53, "4db1b7b83a6f6a20d4db8ebb825ae1908c48ca45770b83b3150963d2d6467af9c32b0fa8e0c6fd71806d1be993c731d3ed536feea9fbc8c5e949722f5342b8", 0x3d}, 0x60, &(0x7f0000003d40)=[{&(0x7f0000000980)}, {&(0x7f00000009c0)="6fee34b7c8d5e948219cd75d51a8f1e4ed84d6ca3fa415dcb70d0b94758f78f394fb690a5971ff5c32f59057fd1d579a55d4166827cb898b19fd5a1e097f53508b8cf65616f0575e46e9ca", 0x4b}, {&(0x7f0000000a40)="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", 0x1000}, {&(0x7f0000001a40)="4bce83136ad5c4867b", 0x9}, {&(0x7f0000001a80)="2ffcc7bc42034a6c2c1797343ff3266e8846c67aedaf4f366a548cbb2364685beb8d3592756fdd0e5b13e3e92cb2ab949addb8293f61a45e4db6efd3938e3c3e4a7d47ee1c2be41881c85852247b62c91ac982be8bc29bae054fa2761d40ecd9379fb5b7142751b59b90cfe848b8790ba2095d0c15d244978d8936ac0c868ac5418948b4ea322e63bdcbe9b3fc4ec788532dcd0d6b4326502d75c1c2134c9fa11ba0c411916e6cbb57a09ddd8044fd88eff8", 0xb2}, {&(0x7f0000001b40)="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", 0x1000}, {&(0x7f0000002b40)="476095c782ae67ac6dd5d9580b023bd966e673a195e135b920d85cef552b52e7cfa72de2d67d2e494ea1cd738c3d77123994f6ea85acc93375dd6e73d3f66f73d69a766a20b16ff23f7d3c4c5fed5d73e969afbc692f0142bd69a858ec29f5836895bc8051ba080a3f315d2098492d872279b11eada495901255e166d2bf73741f5344cf6ca53e2d80b201eb64e523bd9038766a8df1d12ad0dee2033debcc3c490b5b4ed6a32ebb928c34c520873b8ffd196d2b311a9bf550b36c2cd95cb24a37706d47319553cf425a", 0xca}, {&(0x7f0000002c40)="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", 0x1000}, {&(0x7f0000003c40)="405eaac4a45b0900cc292af5375335fea968527458d1dbcdd3ba034fb918f35ea5e0f2b42c716e1eb8414dc36e55fab9551c7598f395583bbffbf4d07e1dff8a7cdaf4c55e7893f29883960dca5fe41e24e9d31775da0ac069711069677e700b63f4268111ea3da65be8227821b99d777ea126654405a485c6c647744228adba9dd60e74549e73c9bf7387c449bb127cb0d65828f480b39da7a0454376c96e41b02480faa240d8bf7a385cdd353f66e7a10fbcfc290434274fd48d5ba60b734bb90fd78d6f9530a0c6d97605a0525612efa103299cf5ce2db79edafea2aa17b0ae1695", 0xe3}], 0x9, &(0x7f0000003e00)={0x18, 0x13b, 0x2, "5e6bf5bec188bf"}, 0x18, 0x1}, 0x20000094) 16:38:39 executing program 7: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0x200002, 0x0) fchdir(r0) r1 = accept4$alg(0xffffffffffffff9c, 0x0, 0x0, 0x800) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000580)=0x3) mkdir(&(0x7f0000001340)='./file0\x00', 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') read(r3, &(0x7f0000000100)=""/179, 0xb3) r4 = semget(0x0, 0x4, 0x200) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000000040)=0xe8) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f00000005c0)=""/166) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000500)={{0x1f, r5, r6, r7, r8, 0x100}, 0x7, 0x3f, 0x5}) 16:38:39 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40406300}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 220.248868] binder: 13352 invalid dec weak, ref 717 desc 0 s 1 w 0 [ 220.255347] binder: 13352:13382 BC_ACQUIRE_DONE u0000000000000000 no match [ 220.255675] binder: 13352:13361 ioctl 40046207 0 returned -16 [ 220.263458] binder: BINDER_SET_CONTEXT_MGR already set [ 220.292184] binder: 13352:13377 ioctl 40046207 0 returned -16 16:38:39 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8937, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:39 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 220.469316] binder: 13406:13414 got transaction to context manager from process owning it [ 220.477766] binder: 13406:13414 transaction failed 29201/-22, size 0-0 line 2843 [ 220.483182] ntfs: (device loop3): parse_options(): Unrecognized mount option mft_zone_m€. 16:38:39 executing program 6: r0 = socket(0x0, 0x2, 0x2) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)={0x303, 0x33}, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x101) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") msgctl$IPC_SET(0x0, 0x5, &(0x7f0000000680)) 16:38:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000002c0)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x10bd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18000007000000002df34e61630189b061105000000067c5f77e6711060000000000000000000095"], &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000000)={{{@in=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f0000000100)=0xe8) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000140)={@local={0xfe, 0x80, [], 0xaa}, 0x58, r1}) 16:38:39 executing program 5: r0 = socket$inet6(0xa, 0x1000800000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x80, 0x0) accept$nfc_llcp(r1, 0x0, &(0x7f0000000080)) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020e0004020000000001000000007a004411ceb2ec54ab54637bb8adf798f8d320bc98b6b31e49ab379998720754c332a08b98b3a12ffc37c6a39d7e86846afaad71c9a5fc"], 0x35}, 0x1}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x10}, 0x1}, 0xfffffffffffffffd) sendmmsg(r2, &(0x7f0000000180), 0x400000000000117, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @local}, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000000200)=0xe8) sendto$packet(r1, &(0x7f0000000040)="6aef865f6a315fef59adddeef09dd581b328e603f899fc156464af8b1cd1dd54d08fe17174c51ba4420c33318ec89baed743", 0x32, 0x800, &(0x7f00000003c0)={0x11, 0x5, r3, 0x1, 0x8, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) 16:38:39 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x1, 0xffffffffffffffff, 0x100000003}, 0x0) pipe2(&(0x7f0000989000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x8c, r4, 0x2, 0x70bd27, 0x25dfdbfd, {0xd}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2=0xe0000002}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x200}]}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, [@IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8c4) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000bc8000)={0xaa}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000380)) r5 = creat(&(0x7f000009aff8)='./file0\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @raw8={"410f44be5f55ea719cbb6635"}}], 0xe) setsockopt$inet_dccp_int(r5, 0x21, 0x15, &(0x7f0000000000)=0x379, 0x4) utimes(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)) lsetxattr(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB='t'], &(0x7f0000000280)='/dev/sequencer2\x00', 0x10, 0x0) dup2(r1, r3) [ 220.549285] binder: BINDER_SET_CONTEXT_MGR already set [ 220.560362] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 220.567737] binder: 13406:13414 ioctl 40046207 0 returned -16 [ 220.583164] binder_alloc: 13406: binder_alloc_buf, no vma [ 220.588547] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. 16:38:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5460, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:40 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x200, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f0000000100), 0x4) r2 = getpgid(0x0) fcntl$setown(r1, 0x8, r2) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = add_key(&(0x7f0000000040)='.dead\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r3, &(0x7f0000000200)=""/126, 0x7e) r4 = socket$inet(0x10, 0x3, 0xc) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, &(0x7f0000000080)) sendmsg(r4, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000001091f001cfffd946fa2830020200a000900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) socket$pptp(0x18, 0x1, 0x2) keyctl$reject(0x13, r3, 0x20, 0x7fff, r3) 16:38:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40406301}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 220.588860] binder: 13406:13419 transaction failed 29189/-3, size 0-0 line 2967 [ 220.598190] binder: BINDER_SET_CONTEXT_MGR already set [ 220.610627] binder: 13406:13414 ioctl 40046207 0 returned -16 [ 220.618815] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.634448] binder: undelivered TRANSACTION_ERROR: 29189 16:38:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8927, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 220.822841] binder: 13447:13452 got reply transaction with no transaction stack [ 220.830657] binder: 13447:13452 transaction failed 29201/-71, size 0-0 line 2759 [ 220.852829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. 16:38:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = gettid() timer_create(0x0, &(0x7f0000000440)={0x0, 0x12, 0x0, @thr={&(0x7f0000000240), &(0x7f0000000340)}}, &(0x7f0000044000)) r2 = syz_open_dev$usbmon(&(0x7f00008be000)='/dev/usbmon#\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000000c0)={{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@ipv4}}, &(0x7f00000001c0)=0xe8) exit(0x678) bind$packet(r2, &(0x7f0000000200)={0x11, 0xff, r3, 0x1, 0xffffffffffffffff, 0x6}, 0x14) ioctl$KVM_SET_NR_MMU_PAGES(r2, 0xc0109207, 0x20000000) bind$packet(r2, &(0x7f0000000000)={0x11, 0x0, r3, 0x1, 0x4, 0x6, @random="b36c52b6ddb8"}, 0x14) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x15) 16:38:40 executing program 5: r0 = socket$inet6(0xa, 0x1000000000006, 0xfff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000140)=[{&(0x7f00000000c0)="480000001400199009004b0101048c01010000ebbd2e2ab961e9ad90632379eb000000000000551f5f0028213ee20607000000000000003f666674a8ffff00c7e5ed5e00000000c8", 0x48}], 0x1) 16:38:40 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") madvise(&(0x7f000079c000/0x800000)=nil, 0x800000, 0xc) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f00000000c0)={r1, 0x101, 0x1, [0x1]}, &(0x7f0000000100)=0xa) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f00000002c0)=0xe8) sigaltstack(&(0x7f00008e0000/0x2000)=nil, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000140)={0x1, [0x5]}, 0x6) madvise(&(0x7f00002f8000/0xc00000)=nil, 0xc00000, 0xd) [ 220.879179] binder: BINDER_SET_CONTEXT_MGR already set [ 220.890477] binder: 13447:13452 ioctl 40046207 0 returned -16 [ 220.913960] binder: 13447:13455 got reply transaction with no transaction stack [ 220.915104] binder: BINDER_SET_CONTEXT_MGR already set 16:38:40 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046312}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:40 executing program 3: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{}], 0x1}, 0x0) setregid(0x0, r0) rmdir(&(0x7f0000000240)='./file0//ile0\x00') syz_genetlink_get_family_id$team(&(0x7f0000000440)='team\x00') r2 = semget$private(0x0, 0x2, 0x100) semctl$GETALL(r2, 0x0, 0xd, &(0x7f00000006c0)=""/242) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc0\x00', 0x2000, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000a00)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000001040)=0x14, 0x80000) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000005900)={@mcast1}, &(0x7f0000005940)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000059c0)={{{@in6=@mcast2, @in=@loopback}}, {{@in=@local}, 0x0, @in6=@local}}, &(0x7f0000005ac0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000007680)={{{@in6, @in=@rand_addr}}, {{@in=@multicast1}, 0x0, @in=@multicast1}}, &(0x7f0000007780)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000007980)={'syzkaller0\x00'}) mkdir(&(0x7f0000000680)='./file0//ile0\x00', 0x0) 16:38:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 220.921639] binder: 13447:13455 transaction failed 29201/-71, size 0-0 line 2759 [ 220.927151] binder: 13447:13452 ioctl 40046207 0 returned -16 [ 220.937360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 220.941632] binder: undelivered TRANSACTION_ERROR: 29201 [ 220.955140] binder: undelivered TRANSACTION_ERROR: 29201 16:38:40 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x891f, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:40 executing program 5: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x180, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x5, 0x0, 0x2, 0x1b, 0x4, "f39e1e1a900fca98046ec1138de5568944b5f7a0c1d4d5625ecf1574200f154293fe36f0ff7bc114baf1ebd92ef6274527ea98b752ed58b786094f37c68c7f4c", "6a1dba99002f984277ad1438cdef00dfb6978a75bca544a6d81309bbfd943bc7497dc5a9c8bf32195a1b9b1bed547ed05d410c6bf9ef8374af08ce74f50453de", "d53fd1a6b0491780ce661b6b97a471613f0a44dce2038df993f0f20e7e4a2705", [0x1, 0xfffffffffffffff7]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r1, 0xc004ae0a, &(0x7f0000000100)) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) 16:38:40 executing program 0: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x3}}, 0x20) getrlimit(0xf, &(0x7f0000000000)) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000140), r1, 0x0, 0x1}}, 0xb0958147) [ 221.162663] binder: 13476:13481 unknown command 1074029330 [ 221.168694] binder: 13476:13481 ioctl c0306201 200002c0 returned -22 [ 221.178007] binder: BINDER_SET_CONTEXT_MGR already set [ 221.187261] binder: 13476:13481 ioctl 40046207 0 returned -16 [ 221.199431] binder: 13476:13483 unknown command 1074029330 [ 221.205468] binder: 13476:13483 ioctl c0306201 200002c0 returned -22 16:38:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 221.212344] binder: BINDER_SET_CONTEXT_MGR already set [ 221.212361] binder: 13476:13481 ioctl 40046207 0 returned -16 16:38:41 executing program 7: bpf$PROG_LOAD(0x5, &(0x7f00000011c0)={0x1, 0x3, &(0x7f0000000140)=@framed={{0x18}, [], {0x95}}, &(0x7f0000000180)='GPL\x00', 0xfb, 0x1000, &(0x7f00000001c0)=""/4096}, 0x48) 16:38:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046303}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:41 executing program 5: r0 = creat(&(0x7f0000000240)='./file0\x00', 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0xb1, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/99, 0x63}, {&(0x7f00000000c0)=""/37, 0x25}, {&(0x7f0000000100)=""/36, 0x24}, {&(0x7f00000001c0)=""/77, 0x4d}, {&(0x7f0000000280)=""/111, 0x6f}], 0x5, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffd) perf_event_open(&(0x7f000000a000)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x1}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000400)={0x97ad, 0x7, 0x209, 0x9, 0x10000, 0x8cf, 0x9, 0x6, r2}, &(0x7f0000000440)=0x20) 16:38:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x894a, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:41 executing program 0: syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x36e, 0xdd038dff5afe19e6) clone(0x10000200, &(0x7f0000000240), &(0x7f0000000040), &(0x7f00000001c0), &(0x7f0000001240)) 16:38:41 executing program 3: capset(&(0x7f0000000140)={0x20071026}, &(0x7f0000000180)) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='setgroups\x00') r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x94, r1, 0x730, 0x70bd2a, 0x25dfdbfc, {0xe}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4e43eaf3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1ff}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x5c}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x3b}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@mcast1={0xff, 0x1, [], 0x1}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e24}]}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e23}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x800}, 0x10) [ 221.742881] binder: BINDER_SET_CONTEXT_MGR already set [ 221.751829] binder: 13523:13529 ioctl 40046207 0 returned -16 [ 221.761351] binder: 13523:13529 unknown command 1074029315 [ 221.767317] binder: 13523:13529 ioctl c0306201 200002c0 returned -22 [ 221.779874] binder: 13523:13531 unknown command 1074029315 [ 221.785800] binder: 13523:13531 ioctl c0306201 200002c0 returned -22 16:38:41 executing program 3: preadv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f0000000440)=""/1, 0x1}], 0x1, 0x10400003) 16:38:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:41 executing program 0: socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x5d, &(0x7f0000000580), 0x0) pipe2(&(0x7f0000000000), 0x0) sendmsg$nl_crypto(r3, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)=@del={0x100, 0x11, 0x910, 0x70bd2b, 0x25dfdbfb, {{'drbg_pr_sha512\x00'}, [], [], 0x400, 0x400}, [{0x8, 0x1, 0x3f}, {0x8, 0x1, 0x1}, {0x8, 0x1, 0x6}, {0x8, 0x1, 0x7ff}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000}, 0x20000001) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:38:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046355}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5450, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:41 executing program 5: r0 = memfd_create(&(0x7f0000000000)='\x00', 0x3) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000040)="f7a75ec7c7801db1c49938f685fef3febd83378e7490cb29e42f9634886ac48064e786318e899a0bd8457f0d5a4823495cb8e8fefaea085e5d6aee2f5020bf399ad77cffc5a0cbfc2fe6649c4c960f8a0cabb7722731a86c3a59f9eeb9ebd8697da3c5a6fe6e62adcfc13c795db9075c51f10db1dbd31356b2f857341c2d02032692c326f81e4a79867c0f51ba24b15c64f19c2df3e3df7c6645be48391ab247fb410fbe554fa7aefca9c0954725d3b6b22045411d2d49529f2554e81f43688c46d4cca239cc104a79bf9e90149169b574544597c8756ff34d11", &(0x7f0000000140)=""/8}, 0x18) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000500)=ANY=[@ANYBLOB="03fffff00000000000000000000000000000000001"]) 16:38:41 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x4) r1 = accept$unix(0xffffffffffffffff, 0x0, &(0x7f0000000080)) fcntl$getownex(r0, 0x10, &(0x7f0000001980)={0x0, 0x0}) lstat(&(0x7f00000019c0)='./file0\x00', &(0x7f0000001a00)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001b00)={0x0}, &(0x7f0000001b40)=0xc) fstat(r0, &(0x7f0000001b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000001c00), &(0x7f0000001c40)=0x0, &(0x7f0000001c80)) r8 = getpgrp(0x0) lstat(&(0x7f0000002400)='./file0\x00', &(0x7f00000034c0)) r9 = getuid() getgroups(0x4, &(0x7f0000001cc0)=[0x0, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000001d00)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001d40)={{{@in=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@dev}}, &(0x7f0000001e40)=0xe8) fstat(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000002340)=[{&(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000001c0)="df4e4f7d8161fa", 0x7}, {&(0x7f0000000200)="f8cc9f2eeb40d0a2a43f25290f6785efe8694f9d4eea4586252d2c7a346cc0fad7c14da15c06af859d809726bdf8b9d749c499fda2fbd8", 0x37}, {&(0x7f00000004c0)="da8b1009443a7a9bf2cdb628ff73e1db0123a187881aac36911336499bd288a9753a4e79e36a06c0b6eec04292b0618bb774216b7ded7748f8283ebf2bbcadcb64c4376ab4d9d3fe254fae7a2b8aaeee8c8e2036ed9946d1da34fc0385ec8c49a81732c183009d4e468489590739fb80101ffe73cfb30e4f6f64508b95a6b863f2b812061c6e9459e21bfbe595023b982bcca6c88456c36c03c238fd684c7aee0fc63926004ddad91276ba637346b1f296652f2c17ffbe3b76d7151808db01f759a44658e8c229581269c4eff63e907a30382b27c80360", 0xd7}, {&(0x7f0000000240)="cc649cd22022056908431144d4e97d428ba82547572427160e13c5a6747e9d5abace4e", 0x23}, {&(0x7f00000005c0)="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", 0x1000}], 0x5, &(0x7f0000001640)=[@rights={0x18, 0x1, 0x1, [r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0x60, 0x810}, {&(0x7f00000016c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000001940)=[{&(0x7f0000001740)="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", 0xfe}, {&(0x7f0000001840)="e833c09977594228a715b3a5d0fa60d4a2c4b57f8192768768250e1fa8421f781f76ffbf82d505bd0cc4d78bce3686c448e273a2daeaf27b386de0fce3999f7fba56729e2fe76916f6c1cc00cc9b194318c04e225cbe87f93ec7cbfc463f0f72c569b6a429596dcc0498be38d58158ce179517ba5b6ea31de8fff7d69d3d3e924510e235a04b7acab71b8f59d4ccc588c726e54bb5f5476ab2b6bdb13872905548815f9a22fb86d1ed86a8e72d160ede5ad05b27320d3e9d3a4ec8fb3bb70b850a0c84331d2072a0674853", 0xcb}], 0x2, &(0x7f0000001f00)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x18, 0x1, 0x1, [r0]}, @rights={0x18, 0x1, 0x1, [r0]}], 0x158, 0x800}, {&(0x7f0000002080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000002300)=[{&(0x7f0000002100)="30a50ca77777904786317e214992de19334fdfca0045a3d2fd74cfed2159cbf16c8315381d83044880afee3f620e", 0x2e}, {&(0x7f00000024c0)="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", 0x1000}, {&(0x7f0000002140)="22729447f92ed927983c84bf1f011a317074fa2565205ebd4573633b173fc169e41f1a9d76391450c50af52e8f7759b76d9d4bc749149cd0fad6e92d9f0db6ce46b2f3359275812bea3d548904df9e52b95468b7e33e228dde3c84902a1e75e8651c4f7ea7e65d85cc25c63d636eea5fb2690e53e613597fec076c8b909dab60f6c7777224265c4b253b2102b27a970cdfc5dfe8d0642b4b76635ca9a8e79b0b82cc67e2bc6f95ac0ef0a132e7d9662b2dac3751f4bad8cd45058df884fe150fad20e05a576502", 0xc7}, {&(0x7f0000002240)="ac63799cc0bd035f75ffd8695c8fb49076e97449e18d11e9b5494fc1d0335e937ddd0216950b905946e09f6ba9aa1c1170f10042f386837ebfc184507462d814cf6b07a3d154ba60deffa26dcb9838c158ea81ac25e8623a27fa83f627277bc0a46c77ce5bfd42f769c16c6462317c05529997a50bd37416893eefe966ce4e11434a4493dc7aaf540202529d9d0da08aacb85bcb4b6d4431acc2b15632339a42044bab29759ee271fbc7d9fad73e77b5091d5f", 0xb3}], 0x4, 0x0, 0x0, 0xc080}], 0x3, 0x4000000) ioctl(r0, 0x8915, &(0x7f0000000100)="72a88bac0f1b18bb978000025cc80900000900000000") sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002480)=[{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000580), 0x0, &(0x7f0000000280)}], 0x1, 0x0) r14 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x0, 0x0) preadv(r14, &(0x7f0000000480)=[{&(0x7f0000000280)=""/209}, {&(0x7f0000000380)=""/242}], 0x10000000000002cb, 0x0) 16:38:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x166}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000100)={r1, @in={{0x2, 0x4e21}}, [0x6, 0x1, 0x2, 0x401, 0x9, 0x8, 0xfffffffffffff801, 0x7f, 0xfffffffffffffff7, 0x10000, 0x3, 0x3, 0x400, 0x6, 0x5515]}, &(0x7f0000000200)=0x100) ioctl(r0, 0x8912, &(0x7f0000000240)="0047fc2f07d82c99240970") r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2) read(r2, &(0x7f0000000300)=""/184, 0xb8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xfffffffffffffffc, 0x8132, 0xffffffffffffffff, 0x0) write(r2, &(0x7f00000000c0)="8d", 0x1) 16:38:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:41 executing program 3: r0 = socket$packet(0x11, 0x40000003, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000040)=0x100, 0xff1f) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) sendto$inet6(r0, &(0x7f0000000500)="0404000000c000ddb8460900fff55b4202938207d9fb3780398d5375000000007929301ee616d5c01843e06590080053c0e385472da7222a2bb42f2dbd94c3b50035060f118d0000f55dc62600000200000000000000804af04600000000aeb462644a4bae1356642490a7b5fc88046afd77fc7ae664f65b9d5a3e5a89ad4fc0dbf83c56d97e6b7aba8691521ab9b14777b38587b97dfad506adee3bc640111f", 0xa0, 0x0, &(0x7f00000004c0)={0xa, 0x200800800, 0x20000000005, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) 16:38:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045878, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 222.171155] binder: 13548:13561 unknown command 1074029397 16:38:41 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000140)={0x0, 0x0, {0x0, 0x80000000, 0x0, 0x3}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x6, 0xbe, 0x7ff, 'queue1\x00', 0x1000}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0x40a85323, &(0x7f0000000280)={{}, 'port0\x00', 0x0, 0x8, 0x80000001, 0x5, 0x0, 0x2, 0x3}) [ 222.216544] binder: 13548:13561 ioctl c0306201 200002c0 returned -22 [ 222.240830] binder: BINDER_SET_CONTEXT_MGR already set [ 222.247166] binder: 13548:13561 ioctl 40046207 0 returned -16 [ 222.259443] binder: 13548:13570 unknown command 1074029397 16:38:41 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x1) unshare(0x2000400) readlinkat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)=""/124, 0x7c) 16:38:41 executing program 0: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x101, 0x8500) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r0, 0x800448d3, &(0x7f0000000140)={{0x3f, 0x7fff, 0x1, 0x1, 0xfffffffffffffffc, 0x4}, 0x7ffffffe, 0xfffffffffffffffe, 0x0, 0x1f, 0xa, "6a2b3700b1b45bf0913fc7c7d66b30144a285339e1c7c1c229973e67ca2d7757e20d15f8f6617d83197aaf82ae3a977627314bf59ce2fd87ddf8f7584186f8f6c7fd02ae7231c8c3ad5ef148612eb4a68d1832fa34af9614c4a7b3efb4f7d070263a4a5f058bd2cd44b1f1b310c032ac606be26582cf0c5093f86158659bc51d"}) write$P9_RRENAMEAT(r0, &(0x7f0000000100)={0x7, 0x4b, 0x1}, 0x7) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6(0xa, 0x803, 0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x1}, 0x20) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000040)=0x40) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000f68000)={@loopback={0x0, 0x1}, 0x800, 0x0, 0xff, 0x2}, 0x20) 16:38:41 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x630c}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 222.266133] binder: BINDER_SET_CONTEXT_MGR already set [ 222.272663] binder: 13548:13570 ioctl c0306201 200002c0 returned -22 [ 222.279590] binder: 13548:13561 ioctl 40046207 0 returned -16 16:38:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:41 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8921, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:41 executing program 3: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000500)='/dev/snd/pcmC#D#p\x00', 0x10000008, 0x8000) ioctl$KVM_REINJECT_CONTROL(r0, 0xae71, &(0x7f0000000000)={0xfff}) readahead(r0, 0x3, 0x1) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) socket$nl_netfilter(0x10, 0x3, 0xc) [ 222.477997] binder: 13595:13602 unknown command 0 16:38:41 executing program 7: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="001b7d51a3df8e15ed25"], 0xa) r2 = memfd_create(&(0x7f00000000c0)='9p\x00', 0x3) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000180)={@local, 0x0}, &(0x7f00000001c0)=0x14) recvfrom$packet(r2, &(0x7f0000000100)=""/92, 0x5c, 0x60, &(0x7f0000000200)={0x11, 0xd, r3, 0x1, 0x8, 0x6, @random="ce50b7fa85bc"}, 0x14) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) write$P9_RLERRORu(r1, &(0x7f0000000240)=ANY=[@ANYBLOB="170000000702000a825d0076626f786b6574312a7b04000010aacf1f4139c6ff57a49d22e849fc8076c5a5dc0e6bd75cbd0f144e2bd127d2b5f0780ea64063ebeadf82028c993dff7f270481aa37acd7415f0c228f9cfb95a07d1db179a57a04a078dba7adea7aec3cade85fa02d5a196d2c03cea0c0d54e701629a8a4f39b1e4794db0e"], 0x17) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)='9p\x00', 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000='version=9p2000', 0x2c}]}}) 16:38:41 executing program 5: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000040)="295ee1311f16f477671070") r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x181440, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r3, 0x541b, &(0x7f00000002c0)) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000180)=0x1) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x18, 0x0, &(0x7f0000000680)=[@increfs={0x40046304}, @clear_death={0x400c630f}], 0x0, 0x0, &(0x7f0000000780)}) getsockopt$IP_VS_SO_GET_DAEMON(r2, 0x0, 0x487, &(0x7f0000000000), &(0x7f0000000080)=0x30) fcntl$getownex(r3, 0x10, &(0x7f00000001c0)={0x0, 0x0}) getsockopt$EBT_SO_GET_INFO(r3, 0x0, 0x80, &(0x7f0000000380)={'filter\x00'}, &(0x7f0000000400)=0x78) write$cgroup_pid(r3, &(0x7f0000000280)=r4, 0x12) futimesat(r3, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)) 16:38:41 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:41 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 222.523018] binder: 13595:13602 ioctl c0306201 200002c0 returned -22 [ 222.553399] binder: BINDER_SET_CONTEXT_MGR already set [ 222.562101] binder: 13595:13602 ioctl 40046207 0 returned -16 16:38:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x4008630a}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 222.570061] binder: BINDER_SET_CONTEXT_MGR already set [ 222.570092] binder: 13595:13606 unknown command 0 [ 222.575571] binder: 13595:13602 ioctl 40046207 0 returned -16 [ 222.586696] binder: 13595:13606 ioctl c0306201 200002c0 returned -22 [ 222.689233] 9pnet: Insufficient options for proto=fd [ 222.705986] 9pnet: Insufficient options for proto=fd [ 222.777630] binder: 13621:13629 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 222.792179] binder: BINDER_SET_CONTEXT_MGR already set [ 222.797849] binder: 13621:13630 ioctl 40046207 0 returned -16 [ 222.805793] binder: 13621:13630 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 222.805810] binder_alloc: 13621: binder_alloc_buf, no vma [ 222.819989] binder: 13621:13629 transaction failed 29189/-3, size 24-8 line 2967 [ 222.826253] binder: release 13621:13629 transaction 748 out, still active [ 222.834627] binder: unexpected work type, 4, not freed [ 222.839971] binder: undelivered TRANSACTION_COMPLETE [ 222.845236] binder: undelivered TRANSACTION_ERROR: 29189 [ 222.851496] binder: BINDER_SET_CONTEXT_MGR already set [ 222.856943] binder: 13628:13632 ioctl 40046207 0 returned -16 [ 222.863102] binder: send failed reply for transaction 748, target dead [ 222.873643] binder: 13628:13632 Acquire 1 refcount change on invalid ref 0 ret -22 [ 222.886149] binder: BC_ATTEMPT_ACQUIRE not supported [ 222.891998] binder: 13628:13632 ioctl c0306201 200002c0 returned -22 [ 222.901009] binder: BINDER_SET_CONTEXT_MGR already set [ 222.906777] binder: 13628:13632 ioctl 40046207 0 returned -16 [ 222.914632] binder: BINDER_SET_CONTEXT_MGR already set [ 222.917342] binder: BC_ATTEMPT_ACQUIRE not supported [ 222.923214] binder: 13628:13632 ioctl 40046207 0 returned -16 [ 222.925263] binder: 13628:13635 ioctl c0306201 200002c0 returned -22 16:38:42 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu\x00', 0x200002, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f00000001c0)={[{0x5}]}) ioctl$KVM_SET_PIT2(r2, 0x4070aea0, &(0x7f0000000840)) 16:38:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:42 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040)='/dev/snd/midiC#D#\x00', 0xe440, 0x1) inotify_add_watch(r0, &(0x7f0000000080)='./file0\x00', 0xa0) add_key(&(0x7f0000000240)='syzkaller\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a}, &(0x7f00000002c0)="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", 0x6b9, 0x0) write$cgroup_type(r1, &(0x7f00000000c0)='threaded\x00', 0xff4c) 16:38:42 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) fallocate(r1, 0xfffffffffffffffc, 0x6, 0x9) fallocate(r1, 0x0, 0x0, 0x1) 16:38:42 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0xefffbffffffffffd, 0x400000) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x4, 0x0, 0x0, r1}) 16:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40106309}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:42 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 223.359377] binder: 13646:13655 BC_ACQUIRE_DONE u4010630900000000 no match [ 223.366624] binder: 13646:13655 unknown command 0 [ 223.390752] binder: 13646:13655 ioctl c0306201 200002c0 returned -22 [ 223.399839] €: renamed from ip6_vti0 16:38:42 executing program 5: r0 = socket$inet(0x2b, 0x1, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x6, 0x98643) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000000c0)={{0x101, 0x4}, 'port0\x00', 0x41, 0xc0001, 0x0, 0xffff, 0x3, 0x5, 0x9, 0x0, 0x0, 0x6}) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast2=0xe0000002}, 0x10) sendto$llc(r1, &(0x7f0000000380)="6ef85c20e9834b33dfa42cb67d006e4afb984cd7b4216533be766985c9d8542140acbf4c36b56f64bc1bbb2fbc9a56d7d3df8940a8b25b0cafd8320825db5f4e888cdfaf1005d895bb64d320c15dafb0d2bed98cb3403700d946041562d20ef1e4c7d4a429c13201b92acda63d556a12a551182af75546c8f37947fbaff4382466bc280dd72292655e722f52e97d2b9d0ab5b6727a637c79879fae9fd5e31e9314f9ad83", 0xa4, 0x4000000, &(0x7f0000000280)={0x1a, 0x33f, 0x7, 0xffffffffffffffff, 0xfffffffffffffffb, 0x200, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x0, 0x0) shutdown(r0, 0x1) [ 223.426411] binder: BINDER_SET_CONTEXT_MGR already set [ 223.435975] binder: 13646:13655 ioctl 40046207 0 returned -16 [ 223.445642] binder: 13646:13658 BC_ACQUIRE_DONE u4010630900000000 no match [ 223.452917] binder: 13646:13658 unknown command 0 [ 223.458892] binder: BINDER_SET_CONTEXT_MGR already set [ 223.464895] binder: 13646:13655 ioctl 40046207 0 returned -16 16:38:42 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[], 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x1, 0x200000) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e20, @multicast1=0xe0000001}}, 0x100000000}, &(0x7f00000002c0)=0x90) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000300)={r2, 0x3, 0x7, 0x100000001}, 0x10) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x80a3396, 0x2000) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e24, 0xffffffff00000001, @loopback={0x0, 0x1}, 0x80000001}, @in6={0xa, 0x4e23, 0x89e, @empty, 0xffffffff}, @in={0x2, 0x4e22, @multicast2=0xe0000002}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xe}}], 0x68) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000100)) 16:38:42 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046302}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 223.467133] binder: 13646:13658 ioctl c0306201 200002c0 returned -22 16:38:42 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8920, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 223.720663] binder: BC_ACQUIRE_RESULT not supported [ 223.733625] binder: 13681:13688 ioctl c0306201 200002c0 returned -22 [ 223.754270] binder: BINDER_SET_CONTEXT_MGR already set [ 223.762063] binder: 13681:13688 ioctl 40046207 0 returned -16 [ 223.770423] binder: BC_ACQUIRE_RESULT not supported [ 223.771269] binder: BINDER_SET_CONTEXT_MGR already set [ 223.776518] binder: 13681:13691 ioctl c0306201 200002c0 returned -22 [ 223.781925] binder: 13681:13688 ioctl 40046207 0 returned -16 16:38:43 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:43 executing program 3: r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000d80)=""/4096) socketpair$inet(0x1e, 0x5, 0x0, &(0x7f0000000d40)={0x0, 0x0}) write$binfmt_aout(r1, &(0x7f0000002f00)=ANY=[@ANYBLOB="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"], 0x1220) recvmmsg(r2, &(0x7f0000002e80)=[{{&(0x7f0000000000)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000500)=""/72, 0x48}], 0x1, &(0x7f0000000800)=""/119, 0x77}}, {{&(0x7f0000000880)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000580), 0x0, &(0x7f0000000900)=""/192, 0xc0}}], 0x2, 0x0, 0x0) 16:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:43 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x10, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000a8d64461da6df3fff3442bc32e00000000000000791208000000000000000000fcaa00009500bca338e0c946b434"], &(0x7f0000f6bffb), 0x0, 0xfffffe21, &(0x7f00001a7f05)=""/251}, 0x18) 16:38:43 executing program 7: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000280)="295ee1311f16f477671070") recvmmsg(r0, &(0x7f00000064c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)=""/162, 0xa2}, {&(0x7f00000002c0)=""/234, 0xea}, {&(0x7f00000003c0)=""/169, 0xa9}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x4, &(0x7f0000000240)=""/16, 0x10, 0x100000000}}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001480)=""/62, 0x3e}, {&(0x7f00000014c0)=""/177, 0xb1}, {&(0x7f0000001580)=""/147, 0x93}], 0x3, &(0x7f0000001680)=""/42, 0x2a, 0x2}, 0x4cf1}, {{&(0x7f00000016c0)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000002b00)=[{&(0x7f0000001740)=""/6, 0x6}, {&(0x7f0000001780)=""/36, 0x24}, {&(0x7f00000017c0)=""/7, 0x7}, {&(0x7f0000001800)=""/219, 0xdb}, {&(0x7f0000001900)=""/94, 0x5e}, {&(0x7f0000001980)=""/213, 0xd5}, {&(0x7f0000001a80)=""/4096, 0x1000}, {&(0x7f0000002a80)=""/119, 0x77}], 0x8, &(0x7f0000002b80)=""/8, 0x8, 0x200}, 0x6}, {{&(0x7f0000002bc0)=@alg, 0x80, &(0x7f0000003e80)=[{&(0x7f0000002c40)=""/17, 0x11}, {&(0x7f0000002c80)=""/33, 0x21}, {&(0x7f0000002cc0)=""/16, 0x10}, {&(0x7f0000002d00)=""/223, 0xdf}, {&(0x7f0000002e00)=""/4096, 0x1000}, {&(0x7f0000003e00)=""/111, 0x6f}], 0x6, &(0x7f0000003f00)=""/34, 0x22, 0x1d3}, 0xe555}, {{&(0x7f0000003f40)=@pppol2tpin6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f0000005100)=[{&(0x7f0000003fc0)=""/145, 0x91}, {&(0x7f0000004080)=""/81, 0x51}, {&(0x7f0000004100)=""/4096, 0x1000}], 0x3, 0x0, 0x0, 0x80}}, {{&(0x7f0000005140)=@nl=@proc, 0x80, &(0x7f0000006340)=[{&(0x7f00000051c0)=""/57, 0x39}, {&(0x7f0000005200)=""/56, 0x38}, {&(0x7f0000005240)=""/4096, 0x1000}, {&(0x7f0000006240)=""/117, 0x75}, {&(0x7f00000062c0)=""/13, 0xd}, {&(0x7f0000006300)=""/15, 0xf}], 0x6, &(0x7f00000063c0)=""/193, 0xc1, 0x3ff}, 0x4}], 0x6, 0x10100, 0x0) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000020207031dfffd946fa2830020200a0009000200001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000040)={0x200, 0xfffffffffffffff8, 0x3}, 0xc) fadvise64(r0, 0x0, 0x8, 0x3) socketpair(0x19, 0x0, 0x7, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f0000000100)={0x0, 0x245, 0x40000, &(0x7f00000000c0)=0x1c00000000000}) 16:38:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0xc0045877, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x3}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:43 executing program 5: mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = syz_fuse_mount(&(0x7f0000000340)='./file0\x00', 0x4000, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='./file0/file1/file0/file0\x00') ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") umount2(&(0x7f0000000080)='./file0\x00', 0x2) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x8000, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xc810}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x8c, r3, 0x108, 0x70bd2d, 0x25dfdbfc, {0x7}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5}, @IPVS_CMD_ATTR_SERVICE={0x68, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x80}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@dev={0xac, 0x14, 0x14, 0xb}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6e}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2}}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x6}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x5}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x8c}, 0x1, 0x0, 0x0, 0x40}, 0x80) read(r0, &(0x7f0000003380)=""/4096, 0x30) 16:38:43 executing program 3: syz_read_part_table(0x322, 0x2, &(0x7f0000000600)=[{&(0x7f0000000540), 0x0, 0x43}, {&(0x7f0000000580)="17f0ff70e3f22bdb4ebac4dd8fa0a0c12f5ca1425d00c7b492fb37f8751bbe2099967373a6f87366d97278fcba226637a4105cae2e709d9c27a07aa5fe947c32b129572a844cf295a13303f6c2886b8ed158c6269b5ddfa8d49aa6539edd5faeced69051", 0x64, 0x8}]) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000002c0)=0xc) fcntl$getownex(r0, 0x10, &(0x7f0000000300)) gettid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000500)=0xc) r2 = getpgrp(r1) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000540)={0x6, r0}) mkdir(&(0x7f0000000240)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000780)={0x20, @time={0x0, 0x1c9c380}, 0xf73e, {0xff, 0x6}, 0x7fff, 0x1, 0xdc}) mq_unlink(&(0x7f00000000c0)='\x00') ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000200)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) utime(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x4a, 0x2}) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000640)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000380)=0xe0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000003c0)={r4, 0xa8, "a27f1cad01085cf11ef0d8651d8411560e4c116eca84b3c0c364fe23839d577d5077b8f21019ab74ef375641e8604ef0c3f71b4b19662ae8de73f14f49aa89796e8007c0057bf5bd9e3c99ed8ee991003628d65ad3e93ad985fd76e0e50a8577f4ba80851ffb306ef704ef523c62c61fd19dbe03e1c06852b1a2811294488ec8bb097612eac6126912f95415bd69644bef6130a1da2e456804283f9e82f8ea21106b45567a865d18"}, &(0x7f00000004c0)=0xb0) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000140)='./file0\x00') prctl$setptracer(0x59616d61, r2) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x2}) write$cgroup_int(r0, &(0x7f0000000080), 0x0) close(r3) 16:38:43 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8949, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:43 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) vmsplice(r0, &(0x7f0000002780)=[{&(0x7f0000000400)="4057f085be6a535c2128ea9d53dde87d56f376d57586a6cbddc2d4a2bfe0612c7f2ba0805a97325518b54429a8994ab389953088147e5fb6f47350fb44de0e65552168d46b22ba87f07be215ce88b6eb41a1e367e0b45b37dea094b68c97a4cff5d2d7d8d9237b3e0f79a04ccc47fb0d712fd81878a673396f1b12b9c120e81516f2b67b7c7a1397048f90b8cad19a823f606ccbdae22baf259f742900a06861556b14974be024468450c01141561c24338b66f1cd7dc77f6ea9a7a23127448f5458b9c934a3a271cb357d855275ffbdc21b9e1333a0fda61dc26173e4f94e56df0939a87cb41d1bcf76ccd39919775910a200979340df6e", 0xf8}, {&(0x7f0000000500)="659d80d619eb9d27db691ea12146ef3392c4f098daece16d2edc48b669f4a0ac5441b896baa0270b690c36f40d082fcd50359d7d1ab8abcff77f2a5b1f4b4ff5edd941a492f03a3b5cb85838cd50e35b47dcc6523486d2d85339eab433bb6e0b248750759d4a55f386cd1115f1a1eecfe6cf9db3765794ce7f858f41fe8399d8810d3d6564fc62ebd15fb834cc5502ebfec3c357d548a89bedc10c5cc69adefb17eb82eae59a51ae8ce88e7cab15", 0xae}, {&(0x7f00000005c0)="fa17c5a0b049405f54168c2c49e31e36bcba501a07b4b786049088e6b3dd7cf5843f0223ea5bd4c0b72ec355a92c95433d7d6166d4d7937dd3758ae72105e124b3298d684c4a15e4aafc7e8ee6402cae979ae391f9a92878125504b5f5355ebc298399bb02c851c940e1dcc94571636f0624474102276d3c2c199ca8ecbb6dc3ece7f2f8e3ecd9f1433cbd3a691f1562dc20cf5f3aabb3c741ada6d0db1d29eeaf33da30fc70149ea64e11502ed0338ad1c2a8f44a75ddc25d11a33e1154e358a9786538f3f43dccc9fb54b7e1cf", 0xce}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="ba6fce2747d9395507bda345e2b2e9a72fdd2dc83c8b386bcb6fb868526283a1a70287f965244584179df85d78af4efe9aa080c2e6e044c6480f2f80a73e9904f435da29d93ca3f50f35f040907869edf18379a5c6bc2a40594f9eed3ecc2e5cb0e921a663c4ea1ab8c67f", 0x6b}, {&(0x7f0000001740)="f1a02c72fea23de58688f3abd6c8e2454b43fb4da64fabf994cb85b5c53bbd38f1fe58a731a71228d7300f4310743cfe82", 0x31}, {&(0x7f0000001780)="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", 0x1000}], 0x7, 0x8) r1 = socket$can_bcm(0x1d, 0x2, 0x2) r2 = request_key(&(0x7f0000002800)='ceph\x00', &(0x7f0000002840)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000002880)='vcan0\x00', 0xfffffffffffffffc) keyctl$clear(0x7, r2) connect$can_bcm(r1, &(0x7f0000000180)={0x1d}, 0x10) sendmsg$can_bcm(r1, &(0x7f00000003c0)={&(0x7f0000000280)={0x1d}, 0x10, &(0x7f0000000380)={&(0x7f0000000300)={0x5, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "388dbba2b150d176"}}, 0x48}, 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000005d40)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r3}, 0x10, &(0x7f0000000040)={&(0x7f00000000c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x8, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4d981ae211e6951"}}, 0x20000108}, 0x1}, 0x0) sendmsg$can_bcm(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x1d}, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)={0x7, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c61f2323d752075b"}}, 0x48}, 0x1}, 0x0) [ 223.967352] netlink: 5 bytes leftover after parsing attributes in process `syz-executor7'. [ 224.004489] netlink: 5 bytes leftover after parsing attributes in process `syz-executor7'. [ 224.080226] binder: 13717:13723 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 224.088322] binder: 13717:13723 BC_ACQUIRE_DONE node 766 has no pending acquire request [ 224.101695] binder: BINDER_SET_CONTEXT_MGR already set [ 224.107153] binder: 13717:13723 ioctl 40046207 0 returned -16 [ 224.111682] binder: BINDER_SET_CONTEXT_MGR already set [ 224.118641] binder: 13717:13724 ioctl 40046207 0 returned -16 16:38:43 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x200000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 224.118738] binder: 13717:13725 IncRefs 0 refcount change on invalid ref 3 ret -22 [ 224.132472] binder: 13717:13725 BC_ACQUIRE_DONE u0000000000000000 no match 16:38:43 executing program 6: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8923, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 224.285082] Dev loop3: unable to read RDB block 1 [ 224.290706] loop3: unable to read partition table [ 224.296264] loop3: partition table beyond EOD, truncated [ 224.302065] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) [ 224.403784] binder: 13756:13759 tried to acquire reference to desc 0, got 1 instead [ 224.411814] binder: 13756:13759 BC_ACQUIRE_DONE node 770 has no pending acquire request [ 224.422393] binder: BINDER_SET_CONTEXT_MGR already set [ 224.427930] binder: 13756:13759 ioctl 40046207 0 returned -16 [ 224.436130] binder: 13756:13760 BC_ACQUIRE_DONE u0000000000000000 no match [ 224.445966] binder: BINDER_SET_CONTEXT_MGR already set [ 224.453159] binder: 13756:13759 ioctl 40046207 0 returned -16 16:38:44 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:44 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8910, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, r0, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f000000e000/0x4000)=nil, 0x4000}, 0x1}) r2 = request_key(&(0x7f00000003c0)='encrypted\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000440)='cifs.spnego\x00', 0xfffffffffffffffa) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, r2) r4 = add_key(&(0x7f0000000140)='cifs.spnego\x00', &(0x7f0000000180)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000002c0)="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", 0xfb, 0xfffffffffffffffd) keyctl$reject(0x13, r3, 0x4, 0x2a8, r4) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r5, 0x84, 0x8, &(0x7f0000013e95), 0x4) r6 = dup3(r5, r0, 0x80000) ioctl$KVM_GET_SUPPORTED_CPUID(r6, 0xc008ae05, &(0x7f00000001c0)=""/190) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'veth1_to_bond:\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x3b, 0x2, [{}, {}]}}) close(r5) close(r1) 16:38:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8930, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:44 executing program 6: socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair(0xa, 0x800, 0x3, &(0x7f0000000040)) pipe2$9p(&(0x7f0000000080), 0x80000) syz_emit_ethernet(0x6a, &(0x7f00000000c0)={@link_local={0x1, 0x80, 0xc2}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @dev={0xac, 0x14, 0x14, 0x11}}, @icmp=@parameter_prob={0x5, 0x2, 0x0, 0x0, 0x0, 0x0, {0x10, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4001, 0x0, @local={0xac, 0x14, 0x14, 0xaa}, @dev={0xac, 0x14, 0x14}, {[@timestamp={0x8, 0x2c, 0x0, 0x0, 0x0, [{}, {}, {[@loopback=0x7f000001]}, {[@broadcast=0xffffffff]}, {[@multicast1=0xe0000001]}, {[@dev={0xac, 0x14, 0x14}]}]}]}}}}}}}, &(0x7f0000000000)) 16:38:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6000000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:44 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x7, 0x0, 0x0, 0x5, 0x6}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2a) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f000051cff6)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCPKT(r1, 0x5420, &(0x7f0000000000)=0xa35) waitid(0x0, r0, 0x0, 0x40000003, &(0x7f0000000140)) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) listen(r2, 0x8) readv(r1, &(0x7f0000dcdff0)=[{&(0x7f0000cd8000)=""/1, 0x1}], 0x1) open_by_handle_at(r1, &(0x7f0000000200)={0xc9, 0x7, "11b66ebe664176d13f211c0360ef3fa7ed982eec16e6d0c797cf3b93f6cda06a5d944fa922f5c1158c929ba18e00c5ee6724214ed81cba9f93821333fe7e11d6c15e85901e99e4b5db2acc4d82decb3c694e21c9dedc04c76e48a8d4794e57dede66dba8e2fc32fea6db8114dcdfe35ddd516ab4c76f7ecf4e9ac54c75812a08f092beb5592b2aa34fab67d1bd0623853b7873df9ae88e5b91badfa1f8c621014c04d97bd99b528f593e021fba61f0f7f71f39b05cdf6cee8014f054e9c86af4b5"}, 0x105840) ioctl(r1, 0x129, &(0x7f00000000c0)) ioctl$TCSETSF(r1, 0x5404, &(0x7f0000000040)={0x8, 0x0, 0x1, 0xfffffffffffffffb, 0x0, 0x0, 0x4, 0xc9b, 0x3}) 16:38:44 executing program 7: r0 = epoll_create1(0x0) r1 = epoll_create1(0x88000) r2 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x6, 0xfe) openat$cgroup(r0, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) ioctl$BLKPG(r2, 0x1269, &(0x7f0000000100)={0x100000001, 0xa97, 0xa2, &(0x7f0000000040)="54114985aeda26cf0fce039dfcdfa55b6570e33f7330bf89879fcf9938a9d3fc5a413de72726cb5c319a55df84d6f1bef074cffd978186f7ad6deb772bd18ea45259bd14878f6d7e78442c9458c9773c238fca01f12d150c0648f22bb2d9b5f43fc7b67b1b428b97dab4a6a538827ffcfee36025eeb2abb7d63768ad97b78ad39be36a895bae7f8d1e9012d7d77cdf5705ad1752dc9334b3fc533de920fb953a913b"}) close(r0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000c85000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) [ 225.103572] binder: BINDER_SET_CONTEXT_MGR already set [ 225.115792] binder: 13776:13789 ioctl 40046207 0 returned -16 [ 225.140617] binder: 13776:13789 BC_ACQUIRE_DONE u0000000000000000 no match 16:38:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x0, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 225.160646] Dev loop3: unable to read RDB block 1 [ 225.165867] loop3: unable to read partition table [ 225.193270] binder: 13776:13801 tried to acquire reference to desc 0, got 1 instead [ 225.201347] binder: 13776:13801 BC_ACQUIRE_DONE node 777 has no pending acquire request 16:38:44 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x6, 0x70, 0x3e3, 0x0, 0x0, 0x0, 0x0, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x566d}, 0x0, 0xffffffffffffffff, r0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x0) [ 225.202860] loop3: partition table beyond EOD, truncated [ 225.215384] loop_reread_partitions: partition scan of loop3 () failed (rc=-5) 16:38:44 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:44 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8943, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:44 executing program 3: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r0, 0xffffffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000140)='y$\x00'}, 0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e22, @multicast1=0xe0000001}}, 0x7b, 0x5, 0x0, 0x81, 0x425a}, &(0x7f0000000340)=0x98) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000000)={r3, 0xc000000000000000}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000380)={r3, @in={{0x2, 0x4e21, @broadcast=0xffffffff}}, 0xffffffff, 0x5, 0x30000000, 0x5, 0x21}, &(0x7f0000000440)=0x98) sendto$inet6(r1, &(0x7f0000000080)='A', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x7, &(0x7f0000000100)=0x8, 0x4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0xa, 0x0, @dev={0xac, 0x14, 0x14}}}}, 0x90) 16:38:44 executing program 7: r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xa, &(0x7f00000001c0), &(0x7f0000000040)=0x4) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x88010, r0, 0x0) 16:38:44 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) poll(&(0x7f0000001080), 0x0, 0xffff) r1 = epoll_create1(0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) r5 = memfd_create(&(0x7f00000005c0)='/dev/snd/pcmC#D#c\x00', 0x2) ioctl$BLKDISCARD(r5, 0x1277, &(0x7f0000000600)=0x400) ioctl$KVM_SET_LAPIC(r4, 0xc008ae88, &(0x7f0000000180)={"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"}) r6 = epoll_create1(0x0) r7 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r1, &(0x7f0000000040)={0x40002017}) timerfd_settime(r7, 0x0, &(0x7f00000002c0)={{}, {0x0, 0x989680}}, &(0x7f0000000100)) setsockopt$inet_MCAST_LEAVE_GROUP(r6, 0x0, 0x2d, &(0x7f0000000140)={0x100000001, {{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}}, 0x88) r8 = syz_open_dev$sndpcmc(&(0x7f0000000580)='/dev/snd/pcmC#D#c\x00', 0x9, 0x40) ioctl$SG_SCSI_RESET(r8, 0x2284, 0x0) epoll_pwait(r6, &(0x7f0000000000)=[{}], 0x1, 0xb26a, &(0x7f00000000c0), 0x8) epoll_pwait(r6, &(0x7f00008c9fc4)=[{}], 0x1, 0xfffffffffffffff7, &(0x7f00009d2000), 0x8) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r7, &(0x7f0000021ff4)={0x2001}) 16:38:44 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 225.458379] binder: 13826:13831 IncRefs 0 refcount change on invalid ref 100663296 ret -22 [ 225.466945] binder: 13826:13831 BC_ACQUIRE_DONE node 781 has no pending acquire request [ 225.477718] binder: BINDER_SET_CONTEXT_MGR already set [ 225.483690] binder: 13826:13831 ioctl 40046207 0 returned -16 [ 225.491829] binder: 13826:13832 IncRefs 0 refcount change on invalid ref 100663296 ret -22 [ 225.500453] binder: 13826:13832 BC_ACQUIRE_DONE u0000000000000000 no match [ 225.501116] binder: BINDER_SET_CONTEXT_MGR already set [ 225.513398] binder: 13826:13831 ioctl 40046207 0 returned -16 16:38:45 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x54c}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x5421, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:45 executing program 7: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x2, 0x80000) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000100)={0x1, 0xffffffffffff5b54, 0x4, 0xff, 0x80000001, 0x101, 0x20, 0x7, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000001c0)={r2, 0x4, 0x3}, 0x8) clone(0x200, &(0x7f0000000040), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f00000001c0)) mknod(&(0x7f0000000040)='./file0\x00', 0x1040, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000200)=@assoc_value={r2, 0x401}, 0x8) execve(&(0x7f0000000180)='./file0\x00', &(0x7f0000000600), &(0x7f0000775000)) r3 = creat(&(0x7f0000000080)='./bus\x00', 0x0) ftruncate(r3, 0x208200) r4 = open(&(0x7f0000000300)='./bus\x00', 0x103000, 0x0) ioctl$KVM_SIGNAL_MSI(r3, 0x4020aea5, &(0x7f0000000000)={0x0, 0x5000, 0xae, 0x9}) sendfile(r3, r4, &(0x7f0000d83ff8), 0x8000fffffffe) fadvise64(r3, 0x800000000000, 0x0, 0x4) 16:38:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000080)) r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="240000000c0607031dfffd946fa2830020200a0009000100061d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) [ 226.240718] binder: 13861:13867 IncRefs 0 refcount change on invalid ref 1356 ret -22 [ 226.248922] binder: 13861:13867 BC_ACQUIRE_DONE node 785 has no pending acquire request [ 226.261925] binder: BINDER_SET_CONTEXT_MGR already set [ 226.268366] binder: 13861:13867 ioctl 40046207 0 returned -16 [ 226.276298] netlink: 'syz-executor3': attribute type 1 has an invalid length. [ 226.285236] netlink: 20 bytes leftover after parsing attributes in process `syz-executor3'. [ 226.290860] binder: 13861:13875 tried to acquire reference to desc 0, got 1 instead [ 226.324486] binder: 13861:13868 IncRefs 0 refcount change on invalid ref 1356 ret -22 [ 226.331154] binder: BINDER_SET_CONTEXT_MGR already set [ 226.332618] binder: 13861:13868 BC_ACQUIRE_DONE node 785 has no pending acquire request [ 226.339196] binder: 13861:13867 ioctl 40046207 0 returned -16 16:38:45 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) ioctl$KVM_SET_LAPIC(r0, 0x4400ae8f, &(0x7f00000000c0)={"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"}) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x10000, 0x210040) syz_open_dev$vcsn(&(0x7f00000004c0)='/dev/vcs#\x00', 0x4, 0x721282) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000080)={0x9, 0x10, 0x1, r1}) 16:38:45 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000040)={0x0, 0x1e5d, 0x3, 0x7f}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000000c0)={r1, 0x2a, "7df561bf6dbdb277d9f1d14f263b975751484e17c7c13c14626dc9aa6f12e260e8724df3e27ba6197de4"}, &(0x7f0000000100)=0x32) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x267, &(0x7f0000000000)=[@op={0x18, 0x117, 0x3}], 0x1}], 0x49249249249265b, 0x0) 16:38:45 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8932, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:45 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:45 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x7400000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 226.591261] binder: 13888:13892 tried to acquire reference to desc 0, got 1 instead [ 226.599292] binder: 13888:13892 BC_ACQUIRE_DONE node 789 has no pending acquire request [ 226.615283] binder: BINDER_SET_CONTEXT_MGR already set [ 226.623463] binder: 13888:13892 ioctl 40046207 0 returned -16 [ 226.631249] binder: BINDER_SET_CONTEXT_MGR already set 16:38:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 226.636777] binder: 13888:13896 BC_ACQUIRE_DONE u0000000000000000 no match [ 226.637222] binder: 13888:13892 ioctl 40046207 0 returned -16 16:38:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4a05000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:46 executing program 3: getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@local}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f00000002c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000400)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2, 0x25}, [], {0x95}}, &(0x7f0000000000)="504c20004cf7d12af11ce92537b5e3191e66de5d4ec18e4c2df01484a86d77842f624946eae310794c8c96ff1466232e25951139bda5d2990e523f8ec3080ffc1224d8dc4c84a9c8e8ab31576806715523fa749e8615c61049b8b1be6aa7740702cc5add", 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x1, 0x0, [], r0}, 0x48) 16:38:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0)') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:46 executing program 5: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200400, 0x0) writev(r0, &(0x7f0000000440)=[{&(0x7f0000000240)="48af00d557130c23e3c190ad69422bf5539da3922fbdc42a0184309a45a7e7f007835aa04830f5887f10fa517226edc2c265405804cd25ca324910a58502be7d70dd4d21cb5cfda3824a7ccc26beb4b5bbf896b3dac18477", 0x58}, {&(0x7f0000000300)="fac1da0a0993d0e3ec33518f360df5e6f57c0118f66fac6cce7201cc08a1d2a391318aaf9e22c10af326921883eb392a1c5f18b41195889178374fd0e203eba43a89492e70113853559d248ac945ae8e076b43d68fa009f0c9f2e0b2cfa4e86988ebb3ba379ea8a4c89452cb8a9c4efa05a45758ba6b4f8e33ae95a623c79c364a64d3733713252d58d3144e04fadb7ae5930100e5240cc1f0473494e87b3feb786c13106bef54264bd271bf0380b0286313e57d520036378d5cc3ebd5a81c04996b1cec7b1276a68ffea79951a5cea3397519cc4b7ee6c8337af3c78b9ae75726bbe1", 0xe3}], 0x2) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000500)={@reserved=0x1}) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @broadcast, @rand_addr}, &(0x7f00000001c0)=0xc) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x28000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000000007000ffdbdf2507000012060000000000000008000600cc8b32fb"], 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000040) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, &(0x7f0000000480)=0x9, 0x8) connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x4e21, 0x7, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x1}, 0x1c) ioctl(r2, 0x8912, &(0x7f0000000400)="025cc83d6d345f8f762070") openat$ashmem(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ashmem\x00', 0x800, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000002c0)='fou\x00') listen(r2, 0x3aa1) [ 226.907094] binder: 13912:13922 tried to acquire reference to desc 0, got 1 instead [ 226.915157] binder: 13912:13922 BC_ACQUIRE_DONE node 794 has no pending acquire request [ 226.930783] binder: BINDER_SET_CONTEXT_MGR already set [ 226.936288] binder: 13912:13922 ioctl 40046207 0 returned -16 [ 226.944104] binder: BINDER_SET_CONTEXT_MGR already set [ 226.950491] binder: 13912:13926 BC_ACQUIRE_DONE u0000000000000000 no match [ 226.959922] binder: 13912:13922 ioctl 40046207 0 returned -16 16:38:46 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) 16:38:46 executing program 6: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23}, 0x1c) listen(r1, 0x1) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x2, 0x10}, 0xc) write$binfmt_misc(r2, &(0x7f0000000240)={'syz1'}, 0x14090) 16:38:46 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x4) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000180)={{0x2, 0x4e24, @broadcast=0xffffffff}, {0x0, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x8, {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 'ip6gretap0\x00'}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105511, &(0x7f0000000040)={{0x70, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000000), 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 16:38:46 executing program 7: r0 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xf95e, 0x81) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000140)=0x14) chroot(&(0x7f0000000000)='./file0\x00') syz_mount_image$hfs(&(0x7f0000000080)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={[{@umask={'umask', 0x3d}, 0x2c}]}) 16:38:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:46 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4c05000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:46 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:46 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="8500000019004000000000000000007c0000000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x1, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 16:38:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5111, &(0x7f0000000040)) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:38:46 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:46 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x74d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x44}, 0xffffffffffffffc2) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="180000c2030000000000000000000000711010000000000000000000000000009500000000000000"], &(0x7f0000f6bffb)='GPL\x00', 0x0, 0x299, &(0x7f00001a7f05)=""/251}, 0x18) sendmsg(r0, &(0x7f0000001780)={&(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @reserved=0x1}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000080)="83b46550604b24f0b9d5c3fcc513bc96ff9d0a812ec2882c70cee68855cc08a024f95486b29717738e152ac848160bae5a24784e0ec1254c353b49b6ab0b101d39bb8105e312edcc0065d62d19297117ac4361c7595f68afa84116cade3263504f029d4b7281ba265401c43668823b689a861e5279c4e31d1f4bd4ddc217b5e67788e3c2536237fac99b4824e039b1c2895da3072346019b20290583751bda8d91dd2c18e30fa82b08a5", 0xaa}, {&(0x7f0000000300)="13163b2bc3b1edb8299e3756e98566cbe64775c24dcda09ac98c07ecc06d2f4701061a5d296db6b93f269ddc59e56b7a56c0ad42672cb1bd03eaff2f7a3d6e26b7f2ac9b0bfdc7b0c37fc25d7ca448c569a47d2b13", 0x55}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)="915a8c2b894bb93bde5e64e2754e7eca2262bcd6744c2e91db91eb49d623b05b287615afbb457b5b78fcf7186ac17b4f2ff239f8a032f95e770dcd42bf16210c287c17b9a3114a79078a1cd2bb19", 0x4e}, {&(0x7f0000000140)="abf460dd4e27f8039d20a871b617e38289b8d8868babff97d193631bb93cc8f3b60206557849bc76f8762fdc51651c6ddf4a4265", 0x34}, {&(0x7f0000000200)="869a156ec90e7f6d23dc81c0b46f621b721a5c74b6754bd8dcdb7424c1d93a1a7529a750d3", 0x25}, {&(0x7f0000001400)="87197be6c7fb988b8d213621289a5ef8f70128db2fe5a7d1e524ce65e15e35c82131c0225298b50437fc523f3bdda08eb516f5175f39168da2b17b6dbc6306f80c04dda2b72e942ca25bbc91b6e4060a22f3b7789e2dbd7252bbdfb970", 0x5d}, {&(0x7f0000001480)="b1a3ac08bdca256f6e7ad22e1f4be2e58880e4237c41492aca66f8a6f3f40d688ee860cb45a435315d0a251f69ea83374a826aa4a35a94a0747126fd79965f511a314b66f19d36db33f0553f087718d8fb0257265912159082ec1a53fa54b02bbe6badb0f081d4265f59fb6bd554c81c994d88eeb153b83b6ccec8173a94295c911b74d36bdcc6ed10470a3d4746ebdeeace51ea3a35c6c1eaadc22dbf2cf804015b00746d729b711a5134b0d36681072805966d9fe2c652428b66906f2237aeeaf38d946e3625bd", 0xc8}], 0x8, &(0x7f0000001600)=[{0x80, 0x187, 0x1ff, "3272602f45b2a26165c77920392e0e6f37eb774a3a4ae86bdfe55d0edad6637bcc196c9e8039940039e74942d72c0f05a8eb9c3d2224df6e5d5169841bf6d59b4bef9cf43ac7cb4f0ef06c3ec7d5b4ba30037be655db04405709ba052c749808f971f29417e460ba00bb44"}, {0xe8, 0x0, 0x38f, "0b0bbf0380ddc17dc9bf27ec2c349d6c598e277acd7a8915e989dcb17df5e5e69e874f6ec7d5270630906bdbb57368cd6c33de149db7e0eb4c596d652d402408d7e973b2289d4f83966afe5bc111c86318a7f75b03fcde9b1215e8e2b15f4e679eaf1ce4de892c46f9261c19e9054437823a43f1f84c6fa6383e9cfe025e079efe881307616ddfb19bc1e29d2eeadd3fa0de854565f0afa577cd4de47a8cb96918ad3ea354945eefe8a95161a1f28b1d20c966ffd8f4a2d2fc07593ba2c0a8d4f2f831e8721d0611b6d78e106ba3048314367f832a"}], 0x168, 0x1}, 0x40000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x9, &(0x7f0000000240), &(0x7f00000002c0)=0x68) [ 227.477216] binder: 13952:13958 tried to acquire reference to desc 0, got 1 instead [ 227.485164] binder: 13952:13958 BC_ACQUIRE_DONE node 799 has no pending acquire request [ 227.509323] binder: BINDER_SET_CONTEXT_MGR already set 16:38:46 executing program 5: r0 = inotify_init1(0xfffffffffffffdff) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) fcntl$setown(r0, 0x8, r1) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) clone(0x0, &(0x7f00000024c0), &(0x7f0000002540), &(0x7f0000002580), &(0x7f00000025c0)) ptrace$setopts(0x4206, r2, 0x0, 0x0) socketpair(0x1, 0x800, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0xb) ptrace(0x4207, r2) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r4, 0x84, 0x6d, &(0x7f0000000300)=ANY=[@ANYRES32=0x0, @ANYBLOB="a800000080bb095f1492cf3341aaab19bf20329ee22950383477e1fb04f4b51ad00c9c0124270d14b7652bd0419a5f150be6cdeacdcc0006b243875e8aad25e9ce7b47e754d6a8f391322d08a113d37c8db2ad4e28c84bb5f0ec0e4f820b3222347d7f2cb2039b435d93223375d01416679a4c7820b04ca4606781e7266e921c2530a7114e0b9a1a22135c2e05c1659dc112924a83e24743e60923b1423e1ebf3193437afbb966fdbffd3351ee7e2018cea263714a778ed4b7ac8a531862e9c8a2ce63738cdf9bee65ccfd118f7fb6f5dafa70e6941918c0679e18c807e9f485dadab7a97739a0be62337104eb94bae626e0bd85f6c9ca"], &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000280)={r5, 0x4}, &(0x7f00000002c0)=0x8) waitid(0x0, r2, &(0x7f0000000080), 0x8, &(0x7f0000000480)) sendmsg$nl_generic(r3, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000025c0)={0x32b8, 0x42, 0xb00, 0x70bd2b, 0x25dfdbff, {0x9}, [@nested={0x140, 0x16, [@typed={0x8, 0x88, @fd=r3}, @typed={0x8, 0x3e, @ipv4=@multicast1=0xe0000001}, @generic="3a593dccda5be5ff77b3", @generic="ecfbcd9b688881e91d3d3694c3491e9fb713f5f0777e8e7fcc83c4263c95e0d30e1cec33320d13438dc3afe3b5c9f5df373e6eb6", @typed={0x8, 0x5, @u32=0x5}, @generic="2fb7968aee426887a9fda31e81006edfb86890ef86959aa7081d6a1fbce67d106a44b93f10b2de6f1c41f85e6382ca7ddd726c4030d9e5c9c68d8e01e44066", @generic="200a62275ec13bf966fe3314fcc0633a18c20997e55a8931d90448b2591fbba0346e71387ca049dcead8bae12519ac6621d70fe82eb543dfea095756538169e9b6fa09261335c5df32f1b4b60dafea82fe04ba4967e9f8de9b3ea75e201d3152c8a4c25e84b6273452d58b6bd7b70155d3899188a720210b18ff400322a0517e3f47f08b9d231d37e4f46dafe7b5e5690beb", @typed={0xc, 0x3a, @str='vmnet1\x00'}, @typed={0x8, 0x4b, @u32=0x7}]}, @generic, @typed={0x8, 0x2c, @fd=r4}, @nested={0x2008, 0x60, [@generic="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", @generic="4cae4027b3ee57ff3a7bd4927b63be3b01ab1327206ba14b5feab1894a70fac40f71ceba783a2ec4fda6be75c9266634fc303c24ee14d19de09b0c8e46c297059b518efa80607babb22a00426f8166ccdf15aec1252e7090e8688e86db787145b56d2d1d3f9c4521be35429a3349f107046dba7d3780184368c6d4fc097698f443481436fe8ef7f14c6cec7908b3caca2ef781a6df9f7bf9697a92e37917fbe5ffba5da0628b830165b1c01abf529ecf8d00a8a14cb11b6dbda6a0174cff6e9de826d9eb97de49072f1eae9b120c6ea69744382ba9b8330dcf75ed1160d51ebb7a9902a9b62d89a78642e95482e099be532bf2a642bdc03825ae7bd85917583f3557d4e4d21431f49cd3ab5e65a7973e6c8a6c1e8ecfab11e7f1836966e36dfa9b48b1ec279e5d331f8a0fcc694d7860c5449df711d11ac0a3a95ec1456dd8ccd0e1efccf67ba2c4d49f0c01867fbc7683f2ff21dcd7db00b1a4e6ebb2294bf11153729581dcc7987beea22fba485ff7528909fdf30c8fec369389bf3b1091046b4cb4b6da212c82a890e6af9bc181c5406cd891d3d233e29ea7443534ef0d476a188365253163c247b23214d0d33fc42dc10808d5ab66db9a316aaff598eceb57623b0de12b89edd6ef6091cf1d22fc60516bf9c474aaffc3c3514592177359538e1948ca247df8775f601c7ef268e1bda836e3150e4635c1bcab789720cc3c750b13511f4f8ef718e45e28171b41b4d25fb2bcdd6c599a4adf827da7897f19dcc672675a10e9ba120e10510bfb0559f065d62936d24512212ff45df6e1936afaf3f736b29a1cb839a6ba7326a754509c8cd8fe57eba9b7e7ba4696d1d3fb0824c31ab21033d7157c8636614f71644d9d247b9301232827822c77ec9fb40c6f692043813821d18c92f50952e6a2448e35a870a3caabbe0c1eb41f2d7233c71c16cf6759f14f7ee60c9fe9b3b69abcec5c19daa89396c24c2ad5390d8c4118f4325ade47a51acc2510ddcc9ef9e7a0f05811df728dfa6ff2b4aaec69086711654475886988bb65f76baf3c5af95ce2a150d435f8e7451ee7720a43da3379d8689b1a49996f9810ace781d76bcb35ef5a3c1dac5f023abc4c9db8fcaa2786b829dbab4b499a267489b8f87a9589152f175e15f21c208e1eb92f0020702729b67ff3f30e8c56c079cb540a83763d8fa0e796ec993af472d34266b47f148b7fe78aa77171ab1389df468b9218ac3e6811679391e2a982bb44be07fff09d44bc6bff954e10a3315e5647b192f9e03a1714d2b30718555252e27435f1b64ec0be6f146f2574661e6c6f92ac2ab5a5ad2fa94a0f15f04331cc50308af38b9cdd028ccd40ceae5c855b2e3d3acd05f355ec386a7d3b57d254340602b99a9c07af8bec0b3c0dc7ba93ba7c17829b5a872b892c51d21d065c3cbb9d039eafe5714a06a34cbad3395b2a4b086699a51e13ad723e0529a4231e44d673aadd5231cc04b72146bc782a8e8b8c28923cfe4acbc74a82197a46a40fbd4425374d0a3e0cadfd6e82a5775dbc419d8695188f1c9e63900b742829d6239a9df63a88ff831a970acb15f3a93db9898269eb27c4dc962fcc33b9ea592d4e176d232a260e0fbf35be82ee2e05f93cba6c7557cd1751fb9849165b646c78477677717776a6efefc2ce820fc5aa3dcbef6f0a1b1bef65ddf6150e0ca14823cc51c824564df2c18778a838ce0e2ac8017708e2ccb7c154da0d414f29f2bc62af7fad82b06ab2baa4a7625ba18bc1bc8ff325c199f7c2ed82aaf31922b3adb0916552c79acca1c9cdbaf2a543213a76f8abbba2aaa388639c0b06f30065947ccdf1ec97333cd2b2ab54c567706008ebc83810fb8487a9f12bb3a4a77a589ceab888fb7edd3d28685233d9b0c68e03b02ccb233b91e78a6538698f9ebf56db6f45026084f99f5b6a4f183cf8a78f71c245bbaa49ddbc5f6b4e5086650833a00940f445ce07a3236f041ce7f50f6535a3c7758bf6dc23a0a399d564d5e003202119cad825a557ee8879254fc9094f73f8ce07ef43c682fa1d2d7e63b518fb5fe4313ec2b270cf9a04f05cdea0b57d12f33755310fafe9659efff08a10cb5ff0d34abdbbc7e9cca75f99977841e578025f930ed6f433436393f4bcbc350ea8a3160fe1d69af68aae11ae401a0889472814cffed5e473c5824676fc633db559127ea7c5fbec2d9d2e24409e97d333cf14f001281f2ad20041c508978d30e5acb7da40fd3f13b51e24b1a0b6a0afe38720567e720513007898af93db602b82e3955fede86827da41cdfbaf3f0ddc5893903699900ac61d9ebe6e17c25741224bb38f071b2f552730ed2b6f0572cd22805d2e95cd1cd80b06edef364f9f0070560945610c9bc344e761ad519644e77b5861dd62b7516e3d35738dec0a30c4f1332597926cfd2acbc60615b4384979a9c139186eb4a8add935ac3133bc90988a0fab610aa4795b35bef825d4be73793fd0592d8db7321294001da3f7e2add4a651f049d50b804d6ada325256c23ecbfab9e66f057eecf1b5e6ef8b08c44e26a9d16bf56598232b3165870abe1f34314bdf2113f5b0a7c7a3eef2083182edc1c6f031c470aeaad09485bbe56c6af22ebba66847ce65bed90b780ca65c94d0c2639138b2bcd03a9fdfa242656a8681a44cbd5a8d0aa98b13ca62a56907b5320d42ed0f5d2786283e02ef5069c3dd29c8a12b367cc81817b3ddd12219df13aded26be6b16b7904bfa15336e402210ff658f7307361084482caace4c9916e135033e56c7a6dfc23b4a0e999fc3a52802d75463f66b533db6dbe62a3154663b9e52ac49cb790cb483af51fca4b14e1bb2a0fdc0b272d6969a557ed66292fb3993547c5ff272f766dcd86a828997c847abb7231a49bf51c54e46d065f760d1b97856c75a9e17adc8305dc150eae0e8e66404a4bcc4a24b97a8d315970487fb492fff913bb36cd0b17791934b4d8b9faac3d339c84fc5d246a3dd13f818afa1299f01d75fbd7829a400b563ba8abbe7769d5a098ca507b091b5ad6561e8b861cec337fd5e3b02520695b8b1f986e5079e8966dc56dd118547b0fa3f43b55900500d0e7459067779082bccd10183c3cf7fc391744615e989bca34c73ade3021c833b824924d2f51f79ab226d77c9fbd823be8d97cf8d6137ea8859e8cc08b685fd69252308f3fd878292de0cd455a05ad809c0d20a786046298c8eb63fecdb00ed1c22f60705147f715ade3ce083b3293f210eacde3d552949d41a0dde1075a1f90b9dea49b1dc2b4eef190cd67aac991a33221800720ccb55760a926e811e9c787eef134f1dcf46c4f2dd910ebdd9456ec26ed0ea69412303c30b91b1ee456e4d7f6a24291225d052940eb8464a6e72dff49ababdcfc2f71596b69c5346927f369d472b75810b9fd4bde713ec6ca7d796ff0f161f7130b2face39a6a301b868f5604f560d1b4dc03018457ffa2822c3f37fc9b5dda0d5dc38e13745dea8df57a0412722adf8d1bac35c83eeb5134d899e27883fa3b1dd9eaa8c768512e1d0b10b30007aa72db5e75f288b493935cb93afc50b515a85bc159e356faf2eed35b307c52f7f3d2130f09223a2c125800febff53ab96fe3d1599c79d04ad89799a955e425f6574841d176593e2b4ada1b69da4d06000e0b40519e229d6433d2be0e8376ce06ce47a7fc04f05c807361fcf394f187bafc6c2f366e11a70b4f3a0b812d8c33fcec25d61a700db2e8e1b48b68c1904a3846ee963ea1e996473afa71b28eb36bcf458d57c8b2772570687332e78e33a4103f018cca247a7d27f187367f00795914bca8b42e1298b6284f42ea1632cc99918a6d3ed94630e2c3d98a9ca4b63f456297255ca79dded45f1cf998f56f4fa4bb3c7b4a9627071c2e5d66d751b4dd525e67aa604e334623d6f0cf8e96f3b720d5758b8b2fc985967cefe92361ca1bd396457d1fec4416b077033f1bdb576983a759427abed94df9750a5279c9227819cd068f35d8f45ea0b7c768452be53ecd92ff2d5bc07a0bf7cafbc6427b307caf468f3de3b87acc035ab99dd85b8f1f73feae544c1a94dddbb07f3121fbc55710f83b4da4164c0c0575038a6c9f834e6701d0b1787aa7c1be90c9f90e9af98b7eeec354a14b1da37a53aed5c40365b0d4fbc6764a1d1013205c587a5d0a7f7d24d9020c05f91942538e03df1b9d5b375667cb40baf45a5351d1373399cefe396edc32bcba3402871c67288071caa40feae14f8354cdf10938a98386118c5f33b26c135d2547d1f5784af517e450b1b5cec4458ab58ffb16d09e171c461dfcf8bc81b72a679e315ddd962f72056299b6b7317052cae37a678b0e51813495df79ebbe76e65e26e4917cd4c63f2b03abab0c140824592071bbb6f1e5e47365eef5366805ca8bd1b302b09b6e588f8d678121b4eedaff3dabd1b6f6499ce918d7e21767c0c153454cdef9fe08702fe1f1001070dc0ca730902c56ee0cad23b283a934ce4a2282fed3d5fcf97ae552e8d80f8b8cfa03b64f6dbb17ae266cd4577a33c793337e725f0d6c9393be557df1fc073821352142741ab05d92b80f5049199f24429d915b3af21d4c4385c2ac6b6f3861a5bac8eb6c1d98de47619a42f07e1fcf306e974c07452689911cc66dafcff343f17da02759c24f1d69c22b86e4da1aca8b6cf9b8d828a13f2fd1013288da869a36fee603adcf1411b720bc16cba1df295e56dd0a68b25eb6a7f7fa8693d574251829c17c752df0cfca4bad80efe0fdf973ce78629c669592b7b1747b771d0fcaabf390fa5557598fa07491ba49a94b277731fec743545c58ca25556840826b9970ba4b702c93364404408249525a1add170011e59b8f30e42e5651d908e1414c33fba5e30d0acba0e8cfbd50835587461abaddcc210b6115c13c0ec86366fe3265e77f89073cd91d12d4e05143591cff636ee9379e802025512d24aed387809104f4060bf30ca0be063c946d95e6ee27250a6c14090f97fc8d2d25adb8b1430b85b6b8a46c2a7572e21b79c0ed2cf4dc460d7399309c25cd1138edb8e21c207285cc27ee133b8a8276537ad020b24952cce3a91a1634eb7b3a479276bacb9cc068d1bb9afb71eaf84a2e1976d5d797d048755f094e7a964bb4e2200e42a5afb23f0e74085db34733a9d40782687fc98171c65b2f2ba334efaf1289f45400507ca7da0cd231aadf6aba5b59eb37ba6e2a0057086264ce100b0a337b95e4fd662ee53b694257574632da02c9b7b80e27b951fe7777a61fbb570f314f3ab814873c34e5ba1b6802c2675f5e251790558e6603374ac4c5d626c7259304c24243699ddb701629d7cae70e220e40e7328ccc4eeb378704dfd8f9aa28eb8f8d45a5726b2138b0ab81c4174622e9f17d17fc78e64f042917a1c8be193137896bcce4551611774ff7b3f0e9b885209926d271407300272762e02077ce0838ffd63f6923ef1d95df1537af0332dcd48a92f4ca8acd3ef02db2e021fb7c05009bb946d92b995de89ca8db8d88000de06914d85d703b2f28b75c210ef27714ab06906cff0a008067da08fe3fb4ec106b2955a63329bec374d4758490618762a4e1fdc0bbdf8643d1d38d80558dda56a7c45b76e2e6d9ed5dadf5b8fcea0df44e8e40c4b7c8d3ace2e8ccceffaf6bdb90fb98e3f34c0e7e23bd0d6fc45b8c9ca4c665aa0bef0f104ea77767fc1a2b07a7dc572c5d10809dfd55b1b918af055473d759d873d8f04a911a940fab89e269e64c12d2ccfb8d260ef4e1a6f2d9e88221a264e4062eeeddc", @generic="48ae5d0e"]}, @nested={0x1104, 0x8e, [@generic="4164ae5a9df7cbe5312457716332a6f90de8dfaaca695cd2d9048f989a9e824dfab80500272434447d61073e7a499dd55a4dd978ed188e63ba56196d181dd44f15aa948eba94b2108cff5f74716ca87ab8168ca8f7b3752a651d6e43981e04dd9aaff33a2e1e41132f382907f1fdfe76f88abb57c2bb7c5689c27fba2e", @generic="6a142cc76b606f126a515d861560bb8f02093d1fbd0f6b09e494a9a0812046003ef5e7e65955fa9346fe3e87af5fea84f2f05e7f6900e200825ff6618a10c357807246e733dc144828bf5bc073fbd08ff4b89181e3b8f57f03d2aeeb208b0a3cb028923b920f42769f92072e01a6cf4695a2946a74942ba726c2216189342f67b421", @generic="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"]}, @typed={0x8, 0x55, @pid=r2}, @nested={0x48, 0x2, [@generic="d940754b8b4f795fb489f14becf8bb37bf65e99eaa87c63065b97e36c13d6e7250a670145e048896fae9fe25543861aebd967833bc6cf0fa05a0052224eb426f2d994c17"]}]}, 0x32b8}, 0x1, 0x0, 0x0, 0x80}, 0x40040) 16:38:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4c05}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 227.525621] binder: 13952:13958 ioctl 40046207 0 returned -16 [ 227.537611] binder: 13952:13960 BC_ACQUIRE_DONE u0000000000000000 no match [ 227.541193] binder: BINDER_SET_CONTEXT_MGR already set [ 227.550128] binder: 13952:13958 ioctl 40046207 0 returned -16 16:38:47 executing program 6: r0 = socket$inet6(0xa, 0x3, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = memfd_create(&(0x7f0000000040)='1', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000027ff3)='/dev/snd/seq\x00', 0x0, 0x80) write(r0, &(0x7f0000000000)="bad3b55221b35f7566d0ef4e4f78686b16", 0x11) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000037000)={0x0, 0x0, 0x0, "9ede7a8c5ae95e4800800000000000604f13eeab65c0322901dc6bd36cde2c39f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa0500000074dbcfa6dc4d"}) write$sndseq(r1, &(0x7f000000a000)=[{0x0, 0x0, 0x0, 0xfffffffd, @tick, {}, {}, @ext={0x0, &(0x7f0000038ffe)}}], 0x280) [ 227.718740] hfs: can't find a HFS filesystem on dev loop7 [ 227.756911] binder: 13989:13994 IncRefs 0 refcount change on invalid ref 19461 ret -22 16:38:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 227.765263] binder: 13989:13994 BC_ACQUIRE_DONE node 804 has no pending acquire request [ 227.842150] binder: BINDER_SET_CONTEXT_MGR already set [ 227.854574] binder: 13989:13994 ioctl 40046207 0 returned -16 [ 227.870364] binder: 13989:14005 IncRefs 0 refcount change on invalid ref 19461 ret -22 [ 227.878654] binder: 13989:14005 BC_ACQUIRE_DONE u0000000000000000 no match [ 227.886616] binder: BINDER_SET_CONTEXT_MGR already set [ 227.892993] binder: 13989:13994 ioctl 40046207 0 returned -16 16:38:47 executing program 5: name_to_handle_at(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="89acf800"], &(0x7f0000000140), 0xcc19d7ceddb116e6) 16:38:47 executing program 6: syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x2, 0x400000) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x84000, 0x0) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) r1 = socket$inet6(0xa, 0x1000000000006, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x2, 0x0) recvfrom$inet6(r2, &(0x7f00000012c0)=""/4096, 0x1000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x701000) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x2004e24}, 0x1c) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e24, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}}, 0x1c) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000140)=0x0) sched_setattr(r3, &(0x7f0000000180)={0x30, 0x7, 0x0, 0x8, 0xffffffff, 0x60000000000000, 0x9, 0x2}, 0x0) ioctl(r2, 0x4000008906, &(0x7f0000000200)) sendmmsg(r2, &(0x7f00000092c0), 0x4ff, 0x0) 16:38:47 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000180)=[@in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80}, 0x1}], 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f00000000c0)=0x308) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x7a, &(0x7f0000000140)={r1}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000000)={r2}, &(0x7f00000002c0)=0x8) 16:38:47 executing program 7: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='cubic\x00', 0xffffffffffffffe4) 16:38:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4b05000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:47 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:47 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) 16:38:47 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1fd8c80b51ce9aed, 0x3, 0x1) r1 = dup(r0) write(r1, &(0x7f00000000c0)="1b0000003a001f0fff07f4f9002304000a04f51108000300020100", 0x1b) 16:38:47 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) pwritev(r0, &(0x7f0000001300)=[{&(0x7f0000000080)="8a6b1aa9f750475f2ca630fac9fa53aa08", 0x11}, {&(0x7f00000000c0)="3b6d790c2413f2da8d883c047885ded8dd1e1922bc61", 0x16}, {&(0x7f0000000100)="602f3e181d9dd81529d4be875fd2f56040e390edcb5bdcabc03b30668d9bc00fb069e69e270375ec65c10454d2d72f03ae5c", 0x32}, {&(0x7f0000000140)="4b5c7f5298ef3d943fc78fa3ad8002b0c107580ca9852c60ff51d3307aec2710fd9ba9147500a7af21a245de32b86a236409c1fb55344965bac7aff2c52efffeae9243ef63929b605fe61c3e4277f03e38", 0x51}, {&(0x7f00000001c0)="9e65c1baf311630e2c241c010c86ff7d419f0c5683bea2aaf31de79e0cc2bd0904c628d60d4cdff3c0043e1d1946c75d98bb2e5a5768e4d314035065fcb0e2813e7ef8bbe3e530b41d196b94f5128ea26c15063523ff96f3b525ceeadcddf1e868f98daab68156987b1f87d12a9728068584cc820e63e96e8f084fb969cf9b1b2ad8748d5e556212ec8a45dc8da2475bd61ed9d114b0f3738ecacff79ac3853d5fb90c839868fb01cbcc241629ccb62db0cae67fcd2d35958b513241145681c11418e19870a3da16ec3e7595685f2ba7db138fa74f017ceffc76d1f34cbe9c0efed4a128e1443fe26d8a096bb3a84837e6d5", 0xf2}, {&(0x7f00000002c0)="672f81e53f1fdbae77ddc0ef9877a6bbe95d796b1f3c7459fd388d82c9b6e4df6630548d530564914d98d679dcf528fda16fb75de2b383d0", 0x38}, {&(0x7f0000000300)="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", 0x1000}], 0x7, 0x3) write(r0, &(0x7f0000002280)='-', 0x1) sendfile(r0, r0, &(0x7f0000000040), 0x8000) [ 228.465466] binder: BINDER_SET_CONTEXT_MGR already set [ 228.473813] binder: 14029:14036 ioctl 40046207 0 returned -16 [ 228.483841] binder: 14029:14036 BC_ACQUIRE_DONE u0000000000000000 no match 16:38:47 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:47 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x7000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 228.512649] binder: 14029:14042 tried to acquire reference to desc 0, got 1 instead [ 228.520782] binder: 14029:14042 BC_ACQUIRE_DONE node 810 has no pending acquire request 16:38:48 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer\x00', 0x40, 0x0) accept$alg(r1, 0x0, 0x0) ftruncate(r0, 0x97f) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000380)=0x7fffffff) ioctl$RTC_WIE_ON(r1, 0x700f) socketpair(0x13, 0x4, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000340)={{0x9, 0x81}, 0x20}, 0x10) r4 = getpgrp(0xffffffffffffffff) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r3, &(0x7f0000000300)={r3, r2, 0x8}) getsockname$packet(r2, &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000c00)=0x14) bind$can_raw(r3, &(0x7f0000000c40)={0x1d, r6}, 0x10) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000180)={0x3, 0x1ffc, 0x401, 0x100}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:48 executing program 7: r0 = socket$inet6(0xa, 0x4480002, 0x100) ioctl(r0, 0x573d, &(0x7f0000000280)="025cc83d6d345f8f762070") fanotify_init(0x40, 0x0) 16:38:48 executing program 5: timer_create(0x9, &(0x7f0000000180)={0x0, 0x12, 0x0, @thr={&(0x7f0000000040), &(0x7f0000000080)}}, &(0x7f0000000000)) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(ccm(serpent))\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200), 0x0) r2 = accept$alg(r0, 0x0, 0x0) sendto(r2, &(0x7f0000000b40)="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", 0x17f, 0x0, &(0x7f0000000ac0)=@l2={0x1f}, 0x80) recvmsg(r2, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000300)=""/121, 0x275}], 0x1, &(0x7f0000139000)=""/70, 0x46}, 0x0) r3 = accept$alg(r2, 0x0, 0x0) sendmsg(r3, &(0x7f0000000140)={&(0x7f0000000380)=@ax25={0x3, {"9ba9310ce70ea5"}, 0xbc}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000400)="b15756a0872f3e475ae40d687bd0cf41cd60d4fd4f74f43a615d251ee17d496a604ef1ae1605b6e71e1feff5785fda4dfb58654f7fb773457a839cd4e0d54bf88954465d85742c6479ca22d21441f44125fe51f54051d9f9b5a5db256762d3e778bc54a60f6c4e7e", 0x68}, {&(0x7f0000000480)="2ef4f97e4b6503b4784cabe9ee2a10ec7b56d448e3eec9d46d53e1cd54e66b52a438a41f580b96eaf625fda1a4fc435eac795ae1282510b020ae240329c101f11335fbca5f0745b5ed23f091eaf3af9b0207c9f59bf025d34422e716bddd7e1dd812c818db62c2bbac38a5b0103176e9211080f31a79e9fb3c6de4e3e0dcc15977b6a1f1949daf4f842685c9388529", 0x8f}], 0x2, &(0x7f0000000cc0)=[{0xc0, 0x108, 0x9, "1048b70861a2963793bff606ead169200bf853dad09f8956cb5592242140cd3197fbc50fac5ca2b688c637b87ccf56654e9b5f68297f55fe65ba9d8d41c7dce1e83465df7dc6b61096b5c20020b179180f56c01aac03d1ba2d5068e73417d155f19a6c947139028061ca5efd5d055b0c15c8ddf34ad5d9ba92513e3da8373297c94c37da04fb5c1208fbf63fd57f00c415dd71271404c6171cff5de7fabb1bc8a6b783cc924ea12941"}, {0x30, 0x104, 0x3, "52d53f4335b3a11579c12670c1867b5e413f81173161ee357ec4cec122cf"}, {0xa0, 0x1, 0x1f8000000, "5e52aa41f49d3268e58ec6939c948440714bbe4611ecd835df2dedae9c88a75e74be5ea68f21cfe6fa472fc928a91d6194c36ab3bc6b114d6d1ab348e6286de7a1e307f34886c55e4b3693b47453f0f5a21276a5293cfd154c2ef45d5a1851a907d4800fb318b66667aedf50589d393772d4c3f08dcd1468a8285949061d7357775100484d9d1bfeba6c4c8afc9136"}, {0x68, 0x103, 0x3, "e3feaa35bf4c4eb37211cbb0fc1339ca511a6d9f3a960d86b14f3c92b15da1d03ce853f480941cdd85384242ebf136d6da59114082e54bb05b1a80b039726e74088c15599bdcdb2aed02a39dfd646e382e32ec7b7c769fbd"}, {0xe8, 0x0, 0x1ff, "2348983b14039ca2f44b8942b388c67ecbf39486844f4be5f0e191155ee8a7bcc1a53560206fc170d3eeca491528b80da4ce5d4b97aeef9082d06ae80110256419cff0a5b6aa80719aea2e2680e3cb2348ea2893d989b8037afdaf7f5cb787cfee3ceb320ff75a8506fe568c02d0e5f1f7c7a02d2d5949473841520a76011895352677de1be40ba7952eb7fee0bc183f0d0745c1975df99b276ebb881038a21d21b377163aac1d8ff58129944ee0aa3563b18fa2b4020d7133d97b68382f0bb7fae00172ef6ee5b51c0f7813b166f1aa5414"}, {0x100, 0x10e, 0x8, "c3f0042ac2f9759ab7a1a2f58614227375efd5d3ea12b6a037e73fb5e096e8d23d28ca80702a23b3a83786baa7448d4d880f7602a011f9c798ff2ae10ec9084f505ad0882365c5aeaf4e2b06cfb2832f333ea05acadc492912f7748e13451232fffdb63d32cfca3e1ed2130c30d004e89c4aef45a329e790127404b861a8386513cca6a328ccd8497a3d1b7e5636e2e23d46f0531c542eae36f15509475d3cdd8479b16d6e99563c5f8bd4e96a161e3c9a394029c2b296bb3a48cfa077b9e39cd2b228a240adf5a929c88aa57f6085baf11bc5adf60d1755898cdfd65a8d0bcd5888ab3bc2870cb96422c3b52627"}, {0x48, 0x117, 0x1, "52d536e0fcb3c984b8a06dfa6d0e1eac8c830d7c3979145ba95a107b01bcf9427eafd86b89c95406bacb59ed7f09aa5f0554"}, {0x68, 0x13f, 0xff, "a12e1dc5f7caf621a616a51e376c23f9ba3e252ab4e2c9a64b115e0a68abb70925f1a33ccab5b466b82453fff9182b11a9806a2d2fa3b9af4569fb8b427c9582fc0156a3f4c169ecc122a41611a6adac327a189c93246f1b"}, {0x28, 0x11b, 0x10000, "c1898ecea6b2c5dc352885f3ac32be113df6a2d40d"}, {0xe0, 0x11f, 0xa86, "403b61e80a1db57e4ceb2bd68883b2818d1f7d0f0516a8a3959b33f9496481e665dd58e497d0296e9c338a2839e7bd6b0bed687aa4b72c611ebed068106eb9428792e28083985c853a7a16636d23e0061861e7cfe3b992b39822707058b85cf5fa7f4b7e9b08ac0323e3bb3901b957b76a3f3f59125acd9afa32ffac3320a8403cdf5cd1b5e084b6a21e0b52b34b91f930c812e87d2f295577dc3e4102b201ffeec0d97c9ae07910b5c86a06f00c93b5daae13e4e7a935aea0cddc62eea18146e9c022d08510cda595"}], 0x598, 0x8004}, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) r5 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r5, 0x8903, &(0x7f0000000280)="025cc83d6d345f8f762070") timer_settime(0x0, 0x0, &(0x7f0000000200)={{}, {0x0, r4+10000000}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x989680}}, &(0x7f00000001c0)) [ 228.719149] binder: 14058:14063 IncRefs 0 refcount change on invalid ref 117440512 ret -22 [ 228.727891] binder: 14058:14063 BC_ACQUIRE_DONE node 814 has no pending acquire request [ 228.747057] binder: BINDER_SET_CONTEXT_MGR already set [ 228.753340] binder: 14058:14063 ioctl 40046207 0 returned -16 16:38:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x48}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 228.761410] binder: 14058:14066 IncRefs 0 refcount change on invalid ref 117440512 ret -22 [ 228.761435] binder: BINDER_SET_CONTEXT_MGR already set [ 228.770205] binder: 14058:14066 BC_ACQUIRE_DONE u0000000000000000 no match [ 228.783785] binder: 14058:14063 ioctl 40046207 0 returned -16 [ 229.032410] binder: 14082:14099 IncRefs 0 refcount change on invalid ref 72 ret -22 [ 229.040505] binder: 14082:14099 BC_ACQUIRE_DONE node 818 has no pending acquire request [ 229.051837] binder: BINDER_SET_CONTEXT_MGR already set [ 229.058867] binder: 14082:14099 ioctl 40046207 0 returned -16 [ 229.061112] binder: BINDER_SET_CONTEXT_MGR already set [ 229.068309] binder: 14082:14104 IncRefs 0 refcount change on invalid ref 72 ret -22 [ 229.073849] binder: 14082:14102 ioctl 40046207 0 returned -16 [ 229.078163] binder: 14082:14104 BC_ACQUIRE_DONE u0000000000000000 no match 16:38:48 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) 16:38:48 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/mixer\x00', 0x101001, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x3, 0x0, 0x2, {0xa, 0x4e21, 0x2, @remote={0xfe, 0x80, [], 0xbb}}}}, 0x80, &(0x7f0000000280), 0x0, &(0x7f0000000200), 0x0, 0x7fff}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:48 executing program 3: r0 = fanotify_init(0x0, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8, 0x521000) ioctl$PPPIOCSFLAGS(r2, 0x40047459, &(0x7f0000000040)=0x2000) ioctl$TIOCCONS(r2, 0x541d) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") poll(&(0x7f0000000100)=[{r0}], 0x1, 0x9) 16:38:48 executing program 7: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff80000000, 0x80) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) setsockopt$inet_sctp_SCTP_INITMSG(0xffffffffffffffff, 0x84, 0x2, &(0x7f00000000c0)={0x7, 0x41ab, 0x3, 0x20}, 0x8) r1 = syz_open_dev$sndtimer(&(0x7f00000b5ff1)='/dev/snd/timer\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000100)) bind$unix(0xffffffffffffffff, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e23}, 0x6e) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$sock_inet_SIOCGIFPFLAGS(0xffffffffffffffff, 0x8935, &(0x7f00000002c0)={'dummy0\x00', 0x4}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r1, 0x40505412, &(0x7f0000000300)={0x3, 0x8000, 0x5c1}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2, 0x0, 0xffefffffffffffff}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3) setsockopt$inet6_opts(r2, 0x29, 0x3f, &(0x7f0000000140)=@hopopts={0x3a, 0x16, [], [@hao={0xc9, 0x10, @loopback={0x0, 0x1}}, @pad1={0x0, 0x1}, @calipso={0x7, 0x40, {0x20, 0xe, 0x57, 0x1, [0x57, 0x4, 0x100000000, 0x9d, 0x2, 0x7d, 0x401]}}, @pad1={0x0, 0x1}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @generic={0x1640, 0x4f, "b8b86ba70041105cfda059d4952021a49a5d0f1e2fbb04dda5332356edb9a153eca7b3d6b0f180ce42569630ad1851d0987da2e33e85b71ea3500b05c71fb29949e1be9d100632803fef47a6eef733"}, @jumbo={0xc2, 0x4, 0x7fff}]}, 0xc0) ioctl$PPPIOCGCHAN(0xffffffffffffffff, 0x80047437, &(0x7f0000000200)) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000440)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000240)={0x0, 0x3, 0x3875}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000003c0)=@sack_info={r3, 0x44, 0x9}, &(0x7f0000000400)=0xc) 16:38:48 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:48 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndseq(&(0x7f00000003c0)='/dev/snd/seq\x00', 0x0, 0x0) socketpair$inet6(0xa, 0xb, 0x2, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x42, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000340)='memory.swap.current\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r4, 0x84, 0x70, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x4, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x5}}, [0x9, 0x6, 0xea, 0x7, 0xffffffff, 0x3ff, 0x3, 0x4, 0x5, 0x4, 0x1, 0x1, 0x6, 0x5, 0x81]}, &(0x7f00000001c0)=0x100) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r5, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}}, 0x84) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e21, 0x401}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r0, 0xc0105303, &(0x7f0000000040)={0x1000, 0x2}) 16:38:48 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x7}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:48 executing program 6: r0 = getpid() sched_setattr(r0, &(0x7f00000000c0)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r1 = epoll_create1(0x0) poll(&(0x7f0000000080), 0x0, 0x800) r2 = timerfd_create(0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000c1d000)) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) r4 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xc000000000000000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x100b}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r4, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r5, 0x1, 0x0, 0x0, 0x0, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e22, @broadcast=0xffffffff}}}, 0x118) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, r3+10000000}}, &(0x7f0000000100)) epoll_pwait(r1, &(0x7f0000000000)=[{}], 0x1, 0x9ce, &(0x7f00000000c0), 0x8) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f000003cff4)={0x7}) 16:38:48 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000180)=0x0) perf_event_open(&(0x7f00000002c0)={0x4, 0x70, 0x5, 0xfff, 0x7, 0xd0f1, 0x0, 0x3, 0x20, 0x9, 0x0, 0x5, 0x9, 0x20, 0x7, 0x40, 0x8, 0x7fff, 0x3, 0xfffffffffffffffb, 0x9, 0xe4a2, 0x1f, 0x7, 0x80000001, 0xab, 0x52, 0x3b9, 0x2, 0x9, 0x1, 0x86, 0x2, 0x5, 0x80000001, 0xc0b9, 0x7fffffff, 0x7, 0x0, 0x4, 0x6, @perf_config_ext={0x7f, 0x6}, 0x20a, 0x2, 0x8000, 0x3, 0x6, 0x3, 0x7}, r1, 0x8, r0, 0x2) r2 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x0) sendmsg$kcm(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="e896d6aaa51f2786db5256d9aa766a6c25b72a2c8a65ea994bb2cc5b234f5d28d7b2abf1d17b8fe9ae9871762312532fac7f3a134bfb1a5b87aca19443dfccb73d1c0fd654400881a50915229b68ebc172ddc78ef9bbc2b138af18488b032ec46dc77ca0d669b3934e12add04bfad003cc856f6be338ca52b5a05f5f3fcc25ede0be", 0x82}, {&(0x7f0000000440)="be7e2e7acab1ef0ebc067610f16425c5f93a87d44066ed843ebe7fcfe9637100", 0x20}], 0x2, &(0x7f00000005c0)=[{0x60, 0x0, 0xaf, "a2f99dace1ef99686ec421c6c2faa57fefe2ab4c1f82ef92dd934d6ba81b8cbb2912f3803bbd50eec6e6b788bff13871fe488deb5f9cdbf322a074e56c9b02ec8893d22a444da85478fa8537170c38"}, {0xf0, 0x1, 0xffffffffffffffff, "c21a93f285ba2f516eb246df14f3e72c36a84f59166942661ff8131fa9d7a8290fdb17ba4b6242fff5fd4db21ab2821be021f0100ebb63ac45cd2029922836caa20986df336f9230c78c5d05ee061ac22c8f189ed54073d201a66c9d1ee0dad0f340f3e57724f522708bf871fadf494d26cccc571efd8ce7c3fc15c8ac3af0bacc2553daa4f0eff2813eb1a67dc7ce5f94008a447df742eb1f6d484eba0ab28f42e7046397a32049e420ca89cc221e3afd96040ed6034afc5c3bf9e8f81d87fc5ff826216b0cdfe96f896d90a425043a0806f12738593c4df8"}], 0x150, 0x10}, 0x4000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:49 executing program 5: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x2, 0x1}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000100)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000040), r1, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000140), 0x13f, 0x2}}, 0x20) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000280)=[0x0, 0x0, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0xee01]) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000003c0), &(0x7f0000000400)=0x0, &(0x7f0000000440)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r8 = getegid() getgroups(0x4, &(0x7f0000000500)=[0x0, 0xee01, 0xee00, 0xee01]) setgroups(0x8, &(0x7f0000000540)=[r2, r3, r4, r5, r6, r7, r8, r9]) setfsgid(r10) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000580)={{0x4, 0x6}, 0x8}, 0x10) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f00000005c0)=""/168) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000680)={0x2b, @local={0xac, 0x14, 0x14, 0xaa}, 0x4e22, 0x4, 'sh\x00', 0x10, 0x7fffffff, 0x37}, 0x2c) ioctl$TCSETAW(r0, 0x5407, &(0x7f00000006c0)={0x1, 0x4, 0xffff, 0x20, 0x2, 0x80000000, 0x8, 0x607b, 0x0, 0x9}) add_key$keyring(&(0x7f0000000700)='keyring\x00', &(0x7f0000000740)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff8) setsockopt$IP_VS_SO_SET_ZERO(r0, 0x0, 0x48f, &(0x7f0000000780)={0xbf, @loopback=0x7f000001, 0x4e22, 0x4, 'lc\x00', 0x1, 0x1, 0x60}, 0x2c) ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000007c0)=""/14) getegid() setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000800)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) r11 = syz_open_dev$amidi(&(0x7f0000000880)='/dev/amidi#\x00', 0x40, 0x101000) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f00000008c0)=0x3, 0x4) connect$vsock_dgram(r0, &(0x7f0000000900)={0x28, 0x0, 0x2711, @reserved=0x1}, 0x10) ioctl$sock_bt_bnep_BNEPCONNDEL(r11, 0x400442c9, &(0x7f0000000940)={0x40, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}) ioctl$int_in(r0, 0x0, &(0x7f0000000980)=0xec) setsockopt$RDS_CONG_MONITOR(r11, 0x114, 0x6, &(0x7f00000009c0), 0x4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in={{0x2, 0x4e24, @multicast2=0xe0000002}}, 0x20000000000000, 0x2, 0x8001, 0xffffffff, 0x40}, &(0x7f0000000ac0)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r11, 0x84, 0x72, &(0x7f0000000b00)={r12, 0x5, 0x10}, &(0x7f0000000b40)=0xc) [ 229.594631] binder: 14126:14134 IncRefs 0 refcount change on invalid ref 7 ret -22 [ 229.602691] binder: 14126:14134 BC_ACQUIRE_DONE node 822 has no pending acquire request [ 229.613471] binder: BINDER_SET_CONTEXT_MGR already set [ 229.619559] binder: 14126:14134 ioctl 40046207 0 returned -16 [ 229.630405] binder: BINDER_SET_CONTEXT_MGR already set 16:38:49 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = semget$private(0x0, 0x20000000102, 0x0) semctl$GETALL(r1, 0x0, 0xd, &(0x7f00000000c0)=""/202) semop(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x800}, {0x2, 0x6, 0x1800}, {0x2}], 0x3) semop(r1, &(0x7f0000000000)=[{0x0, 0x7}], 0x1) 16:38:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 229.641290] binder: 14126:14138 IncRefs 0 refcount change on invalid ref 7 ret -22 [ 229.644892] binder: 14126:14137 ioctl 40046207 0 returned -16 [ 229.649894] binder: 14126:14138 BC_ACQUIRE_DONE u0000000000000000 no match 16:38:49 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = msgget(0x1, 0x90) r2 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) r4 = getuid() r5 = getgid() r6 = fcntl$getown(r0, 0x9) r7 = getpgid(0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000200)={{0x9, r2, r3, r4, r5, 0xc8}, 0x79, 0x1f, 0x100000001, 0x2, 0x0, 0xfffffffffffff11a, r6, r7}) r8 = socket$inet(0x10, 0x3, 0xc) msgget$private(0x0, 0x1) r9 = creat(&(0x7f0000000040)='./file0\x00', 0x2) ioctl$SIOCSIFHWADDR(r9, 0x8924, &(0x7f0000000080)={'bridge_slave_0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1e}}) sendmsg(r8, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000004000)=[{&(0x7f0000000640)="2400000002091f001cfffd946fa283005b580a000900020009000000000015000404ff7e", 0x24}], 0x1}, 0x0) 16:38:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:49 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x7f) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000080)='illinois\x00', 0x9) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) write$evdev(r2, &(0x7f0000000280)=[{}], 0x18) [ 229.890729] binder: 14154:14163 IncRefs 0 refcount change on invalid ref 6 ret -22 [ 229.898799] binder: 14154:14163 BC_ACQUIRE_DONE node 826 has no pending acquire request [ 229.910611] binder: BINDER_SET_CONTEXT_MGR already set [ 229.917284] binder: 14154:14163 ioctl 40046207 0 returned -16 [ 229.925423] binder: 14154:14164 IncRefs 0 refcount change on invalid ref 6 ret -22 [ 229.925428] binder: BINDER_SET_CONTEXT_MGR already set [ 229.933884] binder: 14154:14163 ioctl 40046207 0 returned -16 [ 229.938893] binder: 14154:14164 BC_ACQUIRE_DONE u0000000000000000 no match [ 230.087547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 230.097760] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. [ 230.120306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor3'. [ 230.130658] netlink: 5 bytes leftover after parsing attributes in process `syz-executor3'. 16:38:49 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:49 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x700000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:49 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x40000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:49 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000e5b000)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18ff00000000000000000012000000000000000000000000ecbe7ce0532ccfce6a627fe035639b36bfee721baed9c0fc00b230a1d5d70b3257e34090649646b6c01eef403b7d1ef19672e96e0c5f6f46a23a4de9b9ce024e0e6485283d3cd174859abff5d4e9c6ef26338703124232dbd42e35e316cf8d424e4dd374fe7603442fd62a33762b4958e675dcaea58256a8802fa9de7f18ebc0fb"], &(0x7f00002bf000)='syzkaller\x00', 0x1, 0xb7, &(0x7f0000000440)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x200000000000002, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f000031aff8)={r0, r1}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000400)={&(0x7f0000000280)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {0xd}}, 0x5580}, 0x1}, 0x0) 16:38:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:49 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$addseals(r2, 0x409, 0x1) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047", 0x3b}], 0x1, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b00f2ff0001"]) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f0000000140)={0x3, 0x0, [0xc0000100]}) [ 230.445567] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 230.477893] binder: 14190:14197 tried to acquire reference to desc 0, got 1 instead [ 230.485902] binder: 14190:14197 BC_ACQUIRE_DONE node 830 has no pending acquire request 16:38:49 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 230.505686] binder: BINDER_SET_CONTEXT_MGR already set [ 230.516006] binder: 14190:14197 ioctl 40046207 0 returned -16 [ 230.539462] binder: 14190:14203 BC_ACQUIRE_DONE u0000000000000000 no match [ 230.571936] binder: BINDER_SET_CONTEXT_MGR already set [ 230.578018] binder: 14190:14197 ioctl 40046207 0 returned -16 16:38:50 executing program 6: keyctl$set_reqkey_keyring(0xe, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) request_key(&(0x7f0000016000)='logon\x00', &(0x7f0000ce8ffb)={0x73, 0x79, 0x7a}, &(0x7f0000000000)='\x00', 0x0) accept4(0xffffffffffffff9c, &(0x7f0000000040)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @local}}}, &(0x7f00000000c0)=0x80, 0x80000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffff9c, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0, 0x42}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000180)={0x6, 0x8, 0x2d399311d2cb8b47, 0x3, 0x0, 0x9, 0x4, 0x0, r1}, &(0x7f00000001c0)=0x20) 16:38:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) mount$9p_rdma(&(0x7f0000000140)='127.0.0.1\x00', &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='9p\x00', 0x348080, &(0x7f00000002c0)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@rq={'rq', 0x3d, 0x7f}, 0x2c}, {@timeout={'timeout', 0x3d, 0x7ff}, 0x2c}, {@rq={'rq', 0x3d, 0x5}, 0x2c}, {@rq={'rq', 0x3d, 0x5}, 0x2c}, {@rq={'rq', 0x3d, 0x81}, 0x2c}]}}) bind$inet(r2, &(0x7f0000011ff0)={0x2, 0x4e20, @multicast2=0xe0000002}, 0x10) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000100)='ip6_vti0\x00', 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14}}, 0x10) listen(r2, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bond_slave_0\x00', 0x10) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x1a0) bind$llc(r3, &(0x7f00000000c0)={0x1a, 0x108, 0x80000001, 0xc976, 0x9, 0x6724, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) listen(r1, 0x0) 16:38:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x4, 0x4000) write$P9_RWSTAT(r0, &(0x7f00000002c0)={0x7, 0x7f, 0x1}, 0x7) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000300)='ip6_vti0\x00') ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f0000000340)="7cb51f5d902688433ab150b69438f63dabfe63eca8d4289e896534952df45f53714f91718fd5d1be951bae787b8546a51ef50f54621b0669db6dac848cca58719cd606830afaf89dff8c0c56366992a72c168f500d4fd7a1144107885ba878bbc44adf2087ca7dc6fb0ff82f2333e6914e0f042091e20dffc9d57eb92723d0e48230697506f0d50a7919290b00f2b9cbd8cdeb3328056b9de9ba8a7d1d1a34cb0b4990d411a388b9683f74c43badbee65b9fc54b0e4bcaf4092d089c0a6ed7") socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x74000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:50 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0)={0xffffffffffffffff}, 0x13f, 0x1005}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000300)={r0}) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000000340)=0x6, 0x4) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x5, @empty, 0x10000}, {0xa, 0x4e20, 0x7ff, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, r1, 0xa8dc}}, 0x48) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="0a2575ab05e381e5b3b60cad5c54dbb7380a5a0d90eba7a24a53e75a96b77b1879503811d2b76927422bbe091e8633b6c01a6e6f4cb7dff812b20260292a46727cf435770232e8809d027ffc6682a693aa", 0x51) r3 = accept$alg(r0, 0x0, 0x0) recvmsg(r3, &(0x7f00000015c0)={&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000000)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=""/32, 0xfffffffffffffeab}, 0x0) 16:38:50 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000000100)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f0000000300)='ramfs\x00', 0x0, &(0x7f0000000380)) mount(&(0x7f0000d04000)='./file0\x00', &(0x7f0000903000)='./file0\x00', &(0x7f0000000340)='\x00\x00\x00\x00\x00', 0x100000, &(0x7f00000002c0)) mkdir(&(0x7f0000001500)='./file0/file0\x00', 0x0) mount(&(0x7f0000000f00)='./file0/file0\x00', &(0x7f0000000f40)='./file0/file0\x00', &(0x7f0000000140)='vxfs\x00', 0x3080, &(0x7f00000003c0)) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)='./file0\x00', &(0x7f0000000280)='binfmt_misc\x00', 0x80000, &(0x7f0000000900)) mount(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='overlay\x00', 0x1002, &(0x7f0000000380)) syz_mount_image$f2fs(&(0x7f00000001c0)='f2fs\x00', &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x4, &(0x7f0000000540)=[{&(0x7f0000001540)="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", 0x1000, 0x100000001}, {&(0x7f00000003c0)="60279a8d343434e1b21cbcbc53e1a5ed329fd0f5bfbafc7dcccd067c35c2abdf85b08678cfa5c46ea8d64180ad09958f28bf9ecaad0921b2059b02b6cade08bf1a29422fb81db1bcb59aa85632dad2caf2ca78b696deaa2ba6b717bc943f998092c44af34da70b9ca9bd506df59992cc8d235e82a51c8d1857d5711ab74d283e", 0x80, 0x5}, {&(0x7f00000002c0)="e746d08f3a3d2cab8ed0", 0xa, 0x6}, {&(0x7f0000000440)="ffc936aeccc93d8d1c807c9c8208f19bf0267acda0f4a1477020f04ee063d708d29c70fd83131b705a7c75ff243e76b1c56899507306b72354ac1d74b1a9d632e1b63639a485d4dea65f5a761c3eeaa19c31034c39fa1ce752eb645f9ab1740b7a49f4877a699e3b16a24223941c557c65fcb9094e3e16fee9e7578515483ed240b7dfd54483c4013e74702cbce443dc65d4b19e6f0239d8a62865bb18f6043574dd19d2bf6230fc790ec384b6dc5738e5864bb778ed6afb6dc673ab420a412145c6881f376aa6ece9702d0a0f568eed940652dfec61dfe0346dad948a", 0xdd, 0x9}], 0x52018, &(0x7f00000005c0)={[{@acl='acl', 0x2c}, {@fsync_mode_posix='fsync_mode=posix', 0x2c}, {@jqfmt_vfsv0='jqfmt=vfsv0', 0x2c}]}) umount2(&(0x7f0000000380)='./file0\x00', 0x2) 16:38:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:50 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cfb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x17a) r1 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x18}], 0x1, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x101080, 0x0) ioctl$KVM_GET_TSC_KHZ(r2, 0xaea3) shmget(0x1, 0x3000, 0x224, &(0x7f0000ffd000/0x3000)=nil) accept(r0, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1, &(0x7f00000000c0)=""/50, 0x32}, 0x0) [ 230.834209] binder: 14220:14225 IncRefs 0 refcount change on invalid ref 1946157056 ret -22 [ 230.842955] binder: 14220:14225 BC_ACQUIRE_DONE node 835 has no pending acquire request [ 230.869135] binder: BINDER_SET_CONTEXT_MGR already set 16:38:50 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0), 0x0) r1 = accept$alg(r0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r3 = syz_open_procfs(0x0, &(0x7f0000000080)='statm\x00') sendfile(r1, r3, &(0x7f0000000200), 0x10001) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') getsockopt$inet_udp_int(r5, 0x11, 0x0, &(0x7f0000000180), &(0x7f00000002c0)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 230.880440] binder: 14220:14225 ioctl 40046207 0 returned -16 [ 230.889215] binder: 14220:14232 IncRefs 0 refcount change on invalid ref 1946157056 ret -22 [ 230.895109] binder: BINDER_SET_CONTEXT_MGR already set [ 230.898014] binder: 14220:14232 BC_ACQUIRE_DONE u0000000000000000 no match [ 230.903296] binder: 14220:14225 ioctl 40046207 0 returned -16 16:38:50 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:50 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:50 executing program 6: pipe2$9p(&(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RUNLINKAT(r1, &(0x7f0000000040)={0xffffffffffffffca, 0x4d}, 0x7) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000340)='9p\x00', 0x0, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c}) write$P9_RREADDIR(r1, &(0x7f0000000d00)={0x30, 0x29, 0x1, {0x0, [{{}, 0x0, 0x0, 0xd, './file0/file0'}]}}, 0x30) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0, 0x19, 0x1}, 0xa0) write$P9_RREADDIR(r1, &(0x7f00000003c0)={0xb, 0x29, 0x1}, 0xb) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000900)='9p\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB="ae1fb8cfbe24c976e1d27481", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) open(&(0x7f0000000440)='./file0/file0\x00', 0x7ffc, 0x0) 16:38:50 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$GIO_FONTX(r0, 0x4b6b, &(0x7f00000000c0)=""/72) r1 = syz_open_dev$sndseq(&(0x7f0000009ff3)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00009dcfa8)={0x80}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$SG_SET_DEBUG(r2, 0x227e, &(0x7f0000000040)=0x1) 16:38:50 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:50 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000080)="0f", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) r2 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0/bus\x00', 0x0, 0x0) writev(r2, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) setsockopt$inet6_MRT6_ADD_MFC(r2, 0x29, 0xcc, &(0x7f0000000200)={{0xa, 0x4e21, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0xffffffffffffff01}, {0xa, 0x4e21, 0x800, @empty, 0x5}, 0x2a, [0x800, 0x0, 0xfe1, 0xa2, 0x5, 0x4, 0x1ff, 0x1]}, 0x5c) r4 = dup(r3) ioctl$VHOST_GET_VRING_BASE(r4, 0xc008af12, &(0x7f0000000180)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r4, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000600)={0x6, {{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x1c}}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}}}, 0x108) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f00000001c0)=""/24) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f00000002c0)={0x8000, {{0xa, 0x4e23, 0x902900000000, @loopback={0x0, 0x1}, 0x7}}, 0x1, 0x3, [{{0xa, 0x4e21, 0x5, @empty, 0x9}}, {{0xa, 0x4e20, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x10000}}, {{0xa, 0x4e22, 0x7fffffff, @ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14, 0xe}}, 0x7}}]}, 0x210) sendto$inet(r1, &(0x7f0000029000)="c6", 0x1, 0x0, &(0x7f0000007ff0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) fcntl$getownex(r3, 0x10, &(0x7f0000000500)={0x0, 0x0}) move_pages(r5, 0x3, &(0x7f0000000540)=[&(0x7f0000000000/0x2000)=nil, &(0x7f0000001000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil], &(0x7f0000000580)=[0x535619c8, 0xed, 0x1, 0x5, 0x4], &(0x7f00000005c0)=[0x0, 0x0, 0x0], 0x4) shutdown(r1, 0x1) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7b, &(0x7f0000018000)={0x0, @in6={{0xa}}}, &(0x7f0000000000)=0x8c) 16:38:50 executing program 3: r0 = socket$inet6(0xa, 0x1000000000001, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(r1, 0x40081271, &(0x7f0000000000)=0x800) 16:38:50 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000180)=0x1d) sendmsg$kcm(r0, &(0x7f00000004c0)={&(0x7f0000000340)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, 0x2, 0x2, 0x4}}, 0x80, &(0x7f00000002c0)=[{&(0x7f00000003c0)="f68f19eb301dec4d60189513acb52edf93a28344d1dab34f4ecd9e61f4223addc459dcb55aeddcea77c2931b388b5859fe899bd5ef37902312d48b26db6dc042e6fd749ace3eb679c3d7b0e6b647ecdac2ac0bcbb262571e28db29e22c845d66685b98d7a0afd19e8b4cb67e0720fe2b688a0c", 0x73}, {&(0x7f0000000440)="693cfe3e4b32bad38563d9ce6cf4d4088a5f7a15ddd05c417a60be8024e7a6381198213a02981ee2890c38c2bac8b26981930802ad03a8354f234c89de6f7e584c56c77266c137651d3840846419111cacb8a233aa8b821dc25f5b3a8879ec367dcb9c5545a9eeb9b23ea79906bddd7022adbea6fd3087e0ce", 0x79}], 0x2, 0x0, 0x0, 0x40}, 0x10) socketpair(0xa, 0x0, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000500)={0x8, 0x6, 0x8, 0x10001, 0x100000000, 0x4, 0x977f, 0x2, 0x0}, &(0x7f0000000540)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000005c0)={r2, 0x9, 0x5}, 0x8) [ 231.570016] binder: 14289:14299 IncRefs 0 refcount change on invalid ref 67108864 ret -22 [ 231.578636] binder: 14289:14299 BC_ACQUIRE_DONE node 839 has no pending acquire request [ 231.579969] 9pnet: Insufficient options for proto=fd [ 231.596542] binder: BINDER_SET_CONTEXT_MGR already set 16:38:51 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x8) r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x3, 0x80000) r2 = fcntl$getown(r1, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000240)={{0x8, 0x1, 0x3, 0x800, 'syz0\x00', 0x80000000}, 0x6, 0x30, 0x10001, r2, 0x2, 0x100, 'syz1\x00', &(0x7f0000000200)=['syz_tun\x00', '%wlan1\x00'], 0xf, [], [0x9, 0x24, 0x4, 0xb7]}) ioctl$KDGKBMODE(r1, 0x4b44, &(0x7f00000003c0)) ioctl(r0, 0x8912, &(0x7f0000000040)="025cc83d6d345f8f762070") r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0xa, 0x1, 0x0) r5 = getpgid(0xffffffffffffffff) sched_getattr(r5, &(0x7f0000000080), 0x30, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000180)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x509, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r6}, [@IFA_CACHEINFO={0x14, 0x9, {0x40000000}}, @IFA_LOCAL={0x14, 0x2, @local={0xfe, 0x80, [], 0xaa}}]}, 0x40}, 0x1}, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000400)=ANY=[@ANYBLOB="ff8000001000000041000000050000000500000099fd7d584c56e764beeac22d0e7f1e85788edf912ec8b608f165aa8a3c03b4b56e0671ec4a61cafd8523faaf3e3bf709094c"]) ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000380)={0x17, 0xdd, &(0x7f0000000480)="02944955fc06a2b678a61bf6181fd8f83b91496805380433e9570f12f83932040f4e4b8134232b4ff96de7934e2cf299835fb341c4e9e4504e37435ffa56f19cde1a4ef3a5b38a0f88f46113cba611c678a7d4552c33e42b341d529f5173af0e01e495fc9725a154fe4a58a1ed62374447f44a71222785a033cbb5cf41a7a9d453035676497f2de2cd28c8a08c8ac14a48cbe344ab75601b00435b95fac9b32574362b118f25b3f1aa00606787ee96ca54954a63d1e304a3af0a0dc409a1ce30efedd7db0ac839e5bbd6f6f343d1d4ebf4d2839c6cb38cca6ecbf20da9"}) 16:38:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 231.619955] binder: 14289:14299 ioctl 40046207 0 returned -16 [ 231.628310] 9pnet: Insufficient options for proto=fd [ 231.640979] binder: 14289:14306 IncRefs 0 refcount change on invalid ref 67108864 ret -22 [ 231.649522] binder: 14289:14306 BC_ACQUIRE_DONE u0000000000000000 no match 16:38:51 executing program 6: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000cb9ffc)=0x1, 0x4) bind$inet(r0, &(0x7f0000c16ff0)={0x2, 0x1, @multicast1=0xe0000001}, 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed\x00', 0xa) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f00000000c0)=0x3, 0x1012e) sendto$inet(r0, &(0x7f0000fa0fff), 0xffffff8d, 0x20020007, &(0x7f0000e97fcf)={0x2, 0x1, @loopback=0x7f000001}, 0x10) 16:38:51 executing program 3: timer_delete(0x0) r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x80000000, 0x400400) inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x4) 16:38:51 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:51 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6c}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 231.704219] binder: BINDER_SET_CONTEXT_MGR already set [ 231.711764] binder: 14289:14299 ioctl 40046207 0 returned -16 16:38:51 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:51 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f000010d000)={0x3}, 0x8, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x100000000, 0x101000) ioctl$KVM_S390_UCAS_UNMAP(r2, 0x4018ae51, &(0x7f00000000c0)={0x80100000, 0x80000002, 0xd6ce}) msgrcv(r1, &(0x7f0000000000)={0x0, ""/56}, 0x40, 0x3, 0x3000) msgsnd(r1, &(0x7f0000be2f0a)=ANY=[@ANYBLOB="000000e5"], 0x1, 0x0) [ 231.933471] binder: 14332:14342 IncRefs 0 refcount change on invalid ref 108 ret -22 [ 231.941549] binder: 14332:14342 BC_ACQUIRE_DONE node 843 has no pending acquire request [ 231.980692] binder: BINDER_SET_CONTEXT_MGR already set [ 231.986747] binder: 14332:14342 ioctl 40046207 0 returned -16 [ 231.995897] binder: 14332:14349 IncRefs 0 refcount change on invalid ref 108 ret -22 [ 232.003992] binder: 14332:14349 BC_ACQUIRE_DONE u0000000000000000 no match [ 232.010267] binder: BINDER_SET_CONTEXT_MGR already set [ 232.024781] binder: 14332:14342 ioctl 40046207 0 returned -16 16:38:52 executing program 0: clock_nanosleep(0x6, 0x0, &(0x7f0000000100)={0x0, 0x1c9c380}, &(0x7f00000000c0)) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:52 executing program 5: r0 = socket$inet6(0xa, 0xffffffffffff, 0x7ff) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x40000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x1, 0x5, &(0x7f0000346fc8)=ANY=[@ANYBLOB="18f235d3ce81b9bf35ead5240000000000000000000001000070fd5b5075000069181c0001010000"], &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) 16:38:52 executing program 6: r0 = creat(&(0x7f0000001380)='./file0\x00', 0x0) syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x8, 0x2) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRESHEX=r0, @ANYRESDEC=r0, @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES64=0x0, @ANYPTR=&(0x7f0000000080)=ANY=[@ANYRES32=r0, @ANYBLOB="0a79a77f4c7a026f6fd17373a9f110332aea7b98f0446f91a6b2bf4096bd4d2e391177e657295a24bd87c8e6d0b556dd36a12d8719d51745cf01ba1081c976ddc3ac76d8d323ca3d1d70eeea89082533ef53ac88230de950e4c117834996ea71b09fa061641032b310ad8b6f5ebbf5f335b550bc49fba36b53bf1148db31b487c7a38419224414a43b7780051b60174ad241bf93c572", @ANYRES16=r0]]]) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000540000/0x2000)=nil, &(0x7f0000479000/0x4000)=nil, 0x2000}) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl(r0, 0x1, &(0x7f0000000000)) 16:38:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4800000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f00000002c0)={0x1, {0x0, 0x989680}, 0xffffffffffff8000, 0x20}) fremovexattr(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 232.668817] binder: 14368:14375 tried to acquire reference to desc 0, got 1 instead [ 232.676910] binder: 14368:14375 BC_ACQUIRE_DONE node 847 has no pending acquire request [ 232.688174] binder: BINDER_SET_CONTEXT_MGR already set [ 232.699814] binder: 14368:14375 ioctl 40046207 0 returned -16 [ 232.701546] binder: BINDER_SET_CONTEXT_MGR already set [ 232.711446] binder: 14368:14381 BC_ACQUIRE_DONE u0000000000000000 no match [ 232.712115] binder: 14368:14380 ioctl 40046207 0 returned -16 16:38:52 executing program 5: setfsgid(0x0) r0 = socket$inet6(0xa, 0x80000, 0xbc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg(r0, &(0x7f0000003180)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)="11e672b912076eedd92548dddba2b614c01113797176284a", 0x18}, {&(0x7f00000000c0)="7dbd0b16c852f98b4ce0b4577af7d35e447383ac7c59a46bfc09fcc2d769ee9b83e1adb2abfc8a12f6f8703c0cecb80d811a694dca86866fbc3d276416510dc01d2b976142401dede4eaf5a19328d6155f23caee169869a494d3058f462245bb5f28f5dacdc5df42fcc3717fa11839e1924649d12d1ebbb8613d9744d3e7771872f766481d378c6b7cec4369f3aa1b740cad5775d492574fb0a27df552a9a9685c8c5ab6517752b20b33ffe020d07c754d026244b4272001ef1af396836b083af6fc96d89e39a5ddc03a9a38365b", 0xce}, {&(0x7f0000000440)="f60b7d369683434081b151581754381938f256b9c854e368436a422d450bb6c61bf9100976570aaa69d26c53cb58d22a747f213b9c0c055cf02ec8651bdcd43256711f1ee16f63c004f4b50984aedcfe9362c622fdf008b26de09ef95afc0b439ace394fa00e33ce59ea43e15f337159414dd0388e71305ac3c0949ead957eef8d46f438eecd016736b0cd394c0988f215a37e60e8e04b8f19cafe161f6bd5366560885c62bb5caa97920ed551841ddd919d530edbcfedeba74f14734e9c215dd348ee5a8cee0c78604e6fe0d6a636e5e2d8a0651fbf08f549e538c9", 0xdc}, {&(0x7f00000001c0)="c9d426abe4978ec494a718f1d69ac10ad0a36510fb784328dd90ff4b6b68b0003f7354e83269a71ff36412ab10bfdb1b898c05a32907", 0x36}, {&(0x7f0000000540)="895b81735046937940d9298e79d08557656628e8930aa06ed914125e640344e51a3aea86bf08d5e281a57f719498d69ccaacacd3681d32415a399497f0838929b583c8f406d13d6afe77453a31e1d3612425a919f18684d01e976b10f66467b1f4a6886bf1b2cf3958b9371cf0864d4e8343d33536bce8d064fcad985cbd8ae759", 0x81}, {&(0x7f00000002c0)="ea0748311f68cc66984ffbb98d4c4898168dd5800e07581713123459ecce52a207cf1bc109919ff8faea1e94613faa29cfb32bc45c5c3f886baa309aa9dbf06355ef0209acbb9609", 0x48}, {&(0x7f0000000600)="b6fe88639cc94e757eeba7f229fc1b86b25d6e06916b897177b3fbec62e9afe22997fee03fcd968f3e502718b16aba314fa1338a6f5156150369f68f95395c18fd99f4d03afefe68a3f03ce29d658444cb47d70a709928c8b4db1de4261675a3182a64e70955dd1c4274de1c77a2154932d17b798ae6470b9e79a11d504511ce8707cc6937351a4c1d26758436699bf3fa36b7c9678fec4736913b9739917b196dbb725c5e79f5bfbd0aa163cc3958588c9353aa73729b9a5198bd02bb6dccb73e2ceea85d42", 0xc6}, {&(0x7f0000000700)="8cf70d1efc2e2cbb4decc23fb929370fe7d28b51a1265162b3428cbb273de5e92e4f3263d2ecc833798fc4bb026abd6e60c1434cea857da398fd9c1112a0318f3c0c919fd139880daf9749177d67c86594eac1dd58898478e86db9189e247a5fc2fbd0d87d003dbdbef885ea888ee209dedb7284ecf95814bd3eadaceabec037ebaaa0dc726ed9c137bca2ea1a1f36c8cadab91008494a1cd38fdc7f226170c28abfabc04a3712eee74008f5e655c046cc42b3517060d57ef052c5e08c35f706e7ba022e22f46e186b089027eaaa8560df97674eaec4e26b79529b1df24f23f6e8a56a50aa98f57f5e53d6ad46e438fd959f8c47", 0xf4}, {&(0x7f0000000200)="cdf02e295dff5747dbb9cc93f3f796535e504067e271705148cf32f7f5856336600d8faf10e7e9d31abd94b8f123bcb11db6ca65363343932e98b867a7ec", 0x3e}, {&(0x7f0000000800)}], 0xa, &(0x7f0000000900)=[{0x38, 0x110, 0x100, "3ffa83e13a2e8056ea59fda879c05b755d056a8983c63ce392b093f49ee6a2f119f46b9cb8"}, {0xe8, 0x11f, 0x800, "78ea5b521f37301358410dce3a38b10d58a489af671a9e1040aec340986636e51f3490c0c0203eb36895b5b472cce20d24cffc7941956eeaacd2e77586ab0eaaf91a3b85e62047c37ce4ff97f35b65bb2b91252024dc3532e34afa70de4a98677f0c6cb25fd9ca26e91328501c7904b43209adb3505c0bb71a18d8d1058991671f3c0daac33ae00224007b7173bc03e9f788ffc2aaa3e8e69e5279336eb1443ca821e5570cd119a68a9e65f5a77b2ceefe2a5a4446797777d61a514fcf502ab438cb8a713dc194ad3853eca259cb7425f3"}], 0x120, 0x810}, 0x9c34}, {{&(0x7f0000000a40)=@l2={0x1f, 0x7fffffff, {0x3, 0x10000, 0x7, 0x5, 0xc1c3, 0x401}, 0x2, 0xb4}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000ac0)="eb16db3a9ad0c6a2ce118722368afc3c864b792c3f41cfead0d23737706d2ce42709d89ea67bce299f754f256b919cb86a33593492650b94e3455f290ee8b7d8340bd0a9d6a686c3da0978485f14404f63cdd1c7f3f21b36a410babc06404144295449", 0x63}, {&(0x7f0000000b40)="5db1de02092d824eff4edc3d8fd07e6d28dca3977dc6d3c9790e234db2b82035c36bccbe25c42d63bf767952888b301edda53a34359cd338abc08dede834bcc42beb7dfd5df629f0d16aa3acdf636bc79acc03f6ba1ffac3a9b829dd48ea0779e536e88c2fa1adb3f2e376933fd3cacd56e49e86060bca330b177b87498e99067426242c6553dda7ec3fb48580706670d6a538946195b1445cfc99b43191d4f7783847898d40c94f38e72c2bfe1f6a723c4a1dd3f45081a618c42abcdd36d329e7ba9046452f3ca1f9f1f3200a9b88319a19b5cc918e4491084a6d8ea63f14d986fb2c6071b530a1f943", 0xea}, {&(0x7f0000000c40)="6b3be40117b354fe12ba85a0039defb67d6ce108a2b65cce0b47a0db3bd101044a93fd5c80136550ceec3aa61efcc81dd3feba2a3f0f5229428c70cde3b5930a6efa7c9d1ac202bf198b8059f5e4969e2ebdbd1368d716187ece0353441772edc6b35aa5d7543c9a7761ab5cfa7f1df408ea1b86df729e087f4b861a00b762ec1729ed2c7961a85c48328ba53bf2a6203627b96920cf170c374a487255f06e8758633524a4da1ccca79142dcd24783fafef8e73c8b27f407e48c49e90fe76ed776c63f0c4b64dba1550266bd97a2c9ff9e849a95442f5d3206d4fd48e1382b47e592622a1c1c2b5fc1b6bc6ec7d0617c9da85770d5768a27", 0xf8}, {&(0x7f0000000d40)="ce8a5f5845cb1f0988b568a8e0808fd111c94c5d2e1fd3a6d6b4c8b982668535f10f9c", 0x23}], 0x4, &(0x7f0000000dc0)=[{0x58, 0x29, 0x8001, "b80e0720f80adde839792baab2daa0f458cb42d766fb7707902035d4f398896c9b5884bbe99fda17d02223de9d0b3861eb94994448646ff6b1af2f9f7c26d33bd544"}, {0xd8, 0x185, 0x8, "fab0aaaad6bcadc48758436283091cce53150028240414a5375fb097451fcd2076964a1cb4452eab6645960e5b044da80b82f332e2de57bc1427610f22d879c2d182134675f4635e6abf81098e1dae27de50f3a239c5b6c27d3f254233f00a4203b559a00d3508d36952f079e2b5643dd008085f5cc074d67e98d751404991b39e5ea9ad7b56e1ec03182d150d0becbc71672b86f90c765df30101eeb0326dc0592149b178892d3e3d1812ffe58d76b606dc0ad4c7fc027102d493dd68d3cb5e42e4b1fffb4103"}], 0x130, 0x20000041}, 0x8000}, {{&(0x7f0000000f00)=@ipx={0x4, 0x7fff, 0x0, "9c8db355dbbe", 0x3b42}, 0x80, &(0x7f0000002000)=[{&(0x7f0000000f80)="89fbc6d051ff53658b6d886e74161015958d8b5934161ecbbb06253201a0cea673f48fab7fb19753b5ac4ca93f21f8b6bc2e720f21d4797399053959a1cf8c2fb35373eb687aae6e2473831cac5ec70ba5d0a40a17b9ffb54bbc4fdb6d2d7d926469fc4e79f09ff4a8979dfaaef950aa0426dcdfafa9b886ea90393dcda8f14c472e6c308cd272c091efedae86435ef9cee418d80ba23cb26e0cf122f57b30f0317555d9d340a4550a15ef79065b7712f4d0823d9cff4c65c951876f2616b8ec7a7827b1d9d25d415d17934bb44ebd43ff0fe294d42df0b009c794821ab0ab826177deabfed6ef4a1e073767376fe5b85b7c8416c34049bffce2c5365e835af2cbad87fbb173e2a158de61e6b8cc9f2e55c42b707c74d7dfecb973ca27821e310ea06b7393ae41c87e96a6198acde3a50d6e6c963c9fe76c474d36b84498a6b49f5b098adf44f85711a53d9b443568d17717c26a9c18a94deb4b47bef1f1f3504d6c075ea8cf10b50b9183498b18d8534e112e83a6bd5322fdc466f10faf2175ae19cb143f6041fea6b8b0afd418c5a59175d9d37523e1cdc4df98f931797641d725a02dff6cb25f8be7cec2a509c2a6e494d4bf9955493372b83ccec9f9fdb1d7ab92007cc2427f56d4938a2580b7c621834b9104c94c40f7c2556454bcae1a0374e5602cac7e30f99a7b33e0c35e27d84363e2c42cecfc550ac3a9cf62f6dec5d2da7717c42ef9f16aa31e57a834d27bf8ecc414c473c72fcf9568c2c2a1662b57362e440f523fb3b717b5afd88219721147d18d6741213ec2ff8b9eebe3940a1aa9f77753bb49a1ac9af0c6d9343368f536c8a4c71a7134c26bfb9d3366f1cc3de81469f07e34ba73babbd5020688ded8c63c74c69bccbc31c485ea59bf4b48ddbdad353e1108cf4a6ea5120865dea32128ede9b8d4da04df12517e614778f80461424d2492064148fb4457f8851b117b30b7e7ff22fe1bdac33cf0229b2610e1e34eb03849f1ca10b3ebc71aa402d7b48b42aa35482d108f12613316ccfef58db3d8637789dd2fe570dba8b2b57dfe1c4cf003695eec3ceabd70ae11b4909d2d1c37226881f6114584ca044675ebaf480f7777632af84b78d9ca351094af4ba3aac5977105d1dfc21a49b78006a0750deb0a5b35bf5c07483932665b5be39150bc45a87cb15f28762937fb84a33f108f316d38c012b72c66e2f97320cbffe1f0f1e83c8669725095a823c83d61bcb6f8ae658940d06aee2d3ee13df4331429494c59eab58e1963634a4e52ceffccbab474fa4d1caa58560503b23db8bd053aacac0732e210e680427b5687e732be90bb6ffe5af7717e528907ec354a48d28718dad887f7b52e909f244f55c876ea383e65890b035a47b63001c39ae98f521ba3c9caa2eb34eee6c03fe779f9bc5d74ce6128fc45454ebcc7dea1551ef38da29e4a4c5db5c8e9d40bad637971b7982571edb58c6b9bf4af4e144dc302f74d9641488c39b9e381cddf03ff4aedd7b6329734ae8fe3b2fd9335276e06669a0a155a6e18b6da66b9f6827b1af5c5823326f433807294790769ec1ff89af1626911ea06483267ba0421cf853aa2a8f347f7cdb505acb04e9841e5fe6be669a38d13ed26f374dc80832205e3edbac00ea525701ad9c02bd6cddb62efe93a366209e763aceb4d08654c04f1f5c98c71ec26fa707550cf4c5344a8ec3e1889edd9fffc79d0d9eed82b2cf10d44dcee3cd327ab4e544e9f22c4715f54240fa91413bfc8f6ec9ac71d0c299124d614cc00c833744491b28377c638cef812be49c071b561d511ae4c8f4c8696b70c3699db390508d356314b80b3e4c498489d851598c77908bf9dedd55d66046339db686705cf012284f3c181e6f310e040371516eccc44e570982518c1e1e20411cf21bce39827614b728215c7a2a3b3f32a2baa561f61432b55e9f38b8a4dedb6243f0fdc12b121617dac5d5f067cfb9abb4a37573feaa2934c77b2812e5a5c2fb5ebec0a199bfff88228343888cb5b384a4816a39ff6e2b6c256728aff44059aea6edd75729918d1e4ac60c091b2e7ea69ea5871cd16eb59b1d738bfa3da50100655ebaa90f7aade5919be43195a30ef82d12251fd70f7a73e042d3b27d5aaa377dea8e1cd743cf039b67175622e95d713cd890502e0214cc394935d467b494e9aa57b7f0271d1d36ba5be0d9e109ea44281e2adc11de3abde2900ae4484e9e79d65fcffd106df92cba0481c13970626d4c5f8ba2172cbec26dff570ccb450c8ba30d273609ba50e6cde6a677ea9c1a667ee1549863771aea9284bff9cae51166c9be2427b904ef9b8c184e83ad9613b7a27375d7354faad9a3790de2de580fbe5a822ed89d61f50223029af156382cb361b86f61f740a18af5d8eed2e0b47752e0fcb49c99429622857cf7af4ec63fd34dcd046875d9f61044b6664e26138218d11dda0699bcbf1056125d00189d8bcf66ff978bd7d1e9d53369a42651f3e1ea942dfc7776e8bd1676adbfb178ac594ddad40b2c83120273e421cbe7a53245e6385bab0ff7355721b0fe7d70533b962d8877e7a7c7c41aac244d1ebfeab547b937f5409581072324a00ee720e98a8f990b279bcc8c7f27959e8ac71ae376d1bf2d48d2b2f65037d6f9ea52e3ec5c70e117ba187d536ac545afc2af1fe36b5f73f42271a52598ea3f929dc30c434f7ef9c8234aabc844febe68d1febed9d123da4e22c065f95d8ed6f1c1e83ef0d26b710fc94ee326f47b8763bf10b921a7552edf2ff1f1e81bf7c9ac4253191e2fe71a0d865eaab0dc07f4b1ce25ac7e2a2873d44b8e3f8a9bf1d0d61ab6de1ddfcf36bc4681c8a0b2f1869b7e3532b5eb88ea8e3791214bd75a1c6876e220dc1578867bfe67ebe59244e27daf4db3f1c24af02bb22b34be00304d39f02ae70613e8d48bcf788c7ebcc074953cf8bb15643c0b8c3320e72265a9bc48088eb452f9ad74cb5d0527a50b7b136783c1548b83b20d73893473004b82b30cb5e0e9f430f81e97cd9900c50b1c61203fbecaa881361b38cfba4f8a70a18f91909c8019cdaf77822f0e93835056ccdfad720b4ae1c9554998205b09b161b8c2eaa3283f3c4e7039d9c4d782a82fecc658ceb383fd6e0e7e26ff48ad77db496e1a36fb453c0dd40023c85568f2f68a4e6c4c1e0e2f86b0d831ae17bf9067841d0041d33291e1daf74a12b37f25659559d3fd85262d8e19b8db1f2f3aa5c52489267f9b7ad29efaa2eda99861ed525fe54749d2d543685973209af12e7bc4da5f754e9c7a31a598bd301aa10ea4207503a03e40fa882cb9f265c602493dcd2686e23d0148a133a2fb13cef8c90c4aed15fc2ed0a834d44192b7c47c005211f1b1274549f0d4d19cd18ea5c78502cf76d4c89d862c4a27207a32dd90361c2cdd6fadb011f64eaece9320777203a51cc5dcb04087456176d76cd2c49f9ab674f6dbb6de6b85da7ac48ce554acca215700338a0586af00fb6bc91c9ccb37ca7f29d7294cbb0ff4de75b896a452a362cd8b0c0d3a1a56a4a001f681d8edee4322992811688f6d8d195ed412dd665cbe4ec0560bcf1bb4666c2ffdb7b00c10fdfc67673212fe67819e9dd2f7ce4613a62d38e3a9dfa132d0016e1a94ef81a469a70e92386057f2cc6d75dfd1cb4bdd267086a88511ccb692b579d44b6f953d0084f69fca7e5c20c9bee8f0742e76c53ab45894cc24e2ecd18bb1da9c450ad02318a354082d0ae620cb404ffaa3aa1e55349f910edb470c4bd4fd4f0cb353d7b55009670fbfa39a051ea2ffe2bf4c4cf680c20a5858d576324a2af1b41799d7bd5164de5b64a370f2e6323471fa699b15c9ec8aad0b59ff47d7fe5db15864f85ce453b6147409b7972f8339521d51d6542b9f5985e3f53c4610173562d62ec344f25f1b989d53d8062c222105256c3e350ff2469a1ca37126d262e6f46dd727ce6711baf933fe57f2d69609c29f32b430eac2c025f596ebc5900cc4d2406bcdeeef9b431aa524dd30a40191d2ea4884aaf3f56aee567e87897d35b78de97aec34ba9d86fa58545ea86dacc3f70edecaa2a5eeca9d5fa479bed377c41fa3592c9a6f4d8f1457afc58bcc2eaf8434b6e822730dfa9ddaf25e5e8a3e60eafbd225d32f9404ef9b4578b1d4923d69adc207f83a63b9a540aa2bc6cf0118b5f4f87a0a1d17a447699176a9d5454ec0bce0a6229a77510d2c1ce8454478fa08fdfabbad078b03dfe70c3ec0d4a97d0388ed67c7c3c92c53aa9043dec799c606f2437df3219b3d0997ea33eb04a347bce4e9c3e01acf1f5c1fe2c55eed8904f594c012b33beba914f5a27debfb5f484b9138087ece9a9bb08fd30f536eafa2968dc70d235ab1ec0ce0f59bca4b58a36934f3de8b79eba88d250bc98d329a937ac0d89ba7441c06c37db3fb90e8414884f446293b05009946060cbabad86b6474031fdcb71a0d20ed8bc736185cb66f8255c70f59c342e76eb58a7fc6f9e6c38f15d9209f2115466af5ddcebbc46a103c36c908a669d81926ac51e82e3ba8ddad0eeac29ceeca2e37f17163eabfbf85373cca332e62b1d3d93a5673026bbfd193cb8d03bec5ee7f7e08123da3858473ada30c4ff03ca889df16f34803ce23a620675092c7c12ac8dbf744a56281b78c75433f3a0eb53bf395ef1e1c7e0606676f56bc972554e92a740f80d5ab81120aff5f2fd5ec9fc688b47ef4ea45ea4910a0a09984ecd284bf1fca477a2ee69801bff8541b28c2b437dff21d4bbbe180cb8987f848d0da857435d10d01e5bf63afb8d70f1d9ba98ab62366eeeacdf3df45b66c1c14904cb009dd446dff9150d22df3b6b750b789da331684678cc6251188bffe13b5eee5165d9c8392cb13d88bc9bdd79a8414948bf39cd97d673be17be809b7130db333e0c2617afafa55daffafec8bc98d687bb9577ddc7b20475273df38905954927be1d63b78ffd23f210b34065ab3af76ccc08c5a705660c7d1f67f7f8fd8ef7f84319825149fa51c95fb8d53f26f58cd2b8ac01986230b64739a7d817dcd49571669835d3755b7f1c354c7144ffcef219ca5e65690e7d62a248b1af8ea1acced77a3a66fb0bdb5ceff574c998e185148b5fed869a00e2631c8acaef40366574cc40fcddfba35f8405f293da0635be853aff9e19418965bef7eb4593488f9b2598752afbbc5d4dad62d4c1ae6ee649ad33ad87099a043c16e40f368abcab3eaab6965d7141c1031d81ec87abda3dcaf2fda8da382985d200dbe7bf68a966331c830ab4f7150c51e4f8d3a00dc4fe04e02c3dd36c87e35b5c2b13f73a30c588097759ca6d33512837cfdc20634ffafa327d553409bc5e8c6cc15f49a49ef7b52d08c032b82383f123521f232a648887f49479d683476fccdd0c573988c3eb50c379759b2c18afa0dbb2408d1aa4ba0ebac08fa42bda3aa5823a194f892a143bbb5101c23ee68ce8b5bbea828ce053a0b09960172bd5308b173f2a587a3fa20d022738ecacfae5560a7e95521e2233d651c88b795acedd6b40e46c698846cfa713d3cca6de114fe41ecf179a3b8545ee6522000172ea0b02ab51f4dfccb7063516d57e9e84ad11a62a80642b3510fe5ecbd6fa135d93157cc1358da4202b5ecad79a55ec3748f9a32df715e24dd89b40eeb52e6ceb6503b93121ec2f06cf864708ac2ddaa7b367dd70694df333a6a5d000a61a8b32b4ac1d8a88e86720458b58e884e32ffd42e810caf57dfa261d4738fe75c8f9ff50f9f7b03b109fbe9b9464bb33a09fee33f715298d065601455cc2", 0x1000}, {&(0x7f0000001f80)="0eed79f3cbb41603f03317203a043579def25bbbd85d9893ee5ab434650ca7875ac76a444d9965d522e27a896f4a99f3b2e26974d0815577f7ff97a1342fe0bad339850e2b9c9e44266d69faf7c948b860c14ccf2a5c877631dead8714c2c1de32320fec8eb1866681c729dc3214c5df5c67fc7dc568f1a1c6be77ad3d1bc1", 0xffffffffffffff7a}], 0x2, &(0x7f0000002040)=[{0x1010, 0x3a, 0x200000000000, "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"}, {0x70, 0x107, 0x7, "e791330e801ef8cdd46cfd660125c6424c43b7bcc1b6509862eade08ae54da66336d1e77d2b87915e4fd60e68001b005fa36c2fdfccbdffc5a23d9db774a4c5984b942adc53fa60a1d61fb505c500b3f03693c174d9a8a10b698"}, {0x90, 0x0, 0x7, "207ea1f2d6f408d3546f11b9389434336e167e8c04f4e1d6ef7e6bed58a56d61ec4d07a4d54d5cf27b32c5de343b8d378329fb5e74de5b5a5ea5ffea616a9a479a71705ad6ac8d5029aa7299983cb321eaf33442cc9b46157cce89d61e7f673e92979e6b1fbc147a33c8d0a5cce3984fb18b78f3ef4f5c25542c07dc"}], 0x1110, 0x4800}, 0x93b}], 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = accept$inet(0xffffffffffffff9c, &(0x7f0000000800)={0x0, 0x0, @local}, &(0x7f0000003240)=0x10) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f00000032c0)={0x303, 0x33}, 0xfffffffffffffe3e) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)={[{@case_sensitive_yes='case_sensitive=yes', 0x2c}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d}, 0x2c}, {@uid={'uid', 0x3d, r3}, 0x2c}, {@disable_sparse_no='disable_sparse=no', 0x2c}, {@disable_sparse_yes='disable_sparse=yes', 0x2c}, {@errors_continue='errors=continue', 0x2c}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d}, 0x2c}, {@disable_sparse_no='disable_sparse=no', 0x2c}]}) 16:38:52 executing program 7: modify_ldt$write(0x1, &(0x7f00007a7ff0)={0xd1f}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) modify_ldt$write2(0x11, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x3}, 0x10) modify_ldt$write2(0x11, &(0x7f00000001c0)={0x5, 0x0, 0x0, 0x7, 0xbc9, 0x9, 0x0, 0x6, 0x1, 0x8}, 0x10) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) getdents64(r0, &(0x7f0000000140)=""/90, 0x5a) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f0000000000)) 16:38:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:52 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4c000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:52 executing program 6: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x3, 0xa, 0x8, 0xb, 0xc, 0x8}, @call={0x85, 0x0, 0x0, 0x17}], &(0x7f0000000040)='syzkaller\x00', 0xfffffffffffffff7, 0x78, &(0x7f0000000080)=""/120, 0x41f00, 0x1, [], 0x0, 0x3}, 0x48) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000180)={0x2, 0x1, 0x6, 0x200, 0x5, [{0x2, 0x1, 0x3, 0x0, 0x0, 0x200}, {0xffffffff, 0x4, 0x100000000, 0x0, 0x0, 0x200}, {0x100000000, 0x7, 0x0, 0x0, 0x0, 0x400}, {0x3a, 0x5, 0x423, 0x0, 0x0, 0x1008}, {0x6, 0x7f, 0xffffffff, 0x0, 0x0, 0x901}]}) r1 = syz_open_dev$midi(&(0x7f00000002c0)='/dev/midi#\x00', 0x8000, 0x400c01) setsockopt$RDS_CANCEL_SENT_TO(r1, 0x114, 0x1, &(0x7f0000000300)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) writev(r0, &(0x7f0000000880)=[{&(0x7f0000000340)="58d2bbf21a41ca882eb5638d29dc2c7c0f285cc3093716ace12908dcdfe45e6902b469605a8772095ad6202cd6d6ccfd98cc49db9610b50db2e999a7f1c391cef947f9dad0eeec5748754510e097bde67d7786893418e5d2187981186d0e584f57feaac9f32958793870989d28b6fc2f7c221c636c40c2f38c50c351306bce9a538fc6e56aadbc2782d06c162a2f1ea2d1a465732845ee0e87c2908ceaa98c7429785a2fceca4a757e1a22370b2ec13b4258c99da0f2ab327046", 0xba}, {&(0x7f0000000400)="38287b6ccee165f985745867776afa1144f52a395c0be1c0e60fb1c8e8a347313c81955d37abd3aa72469aaee4d9e5f593df3adbfe2171bd1fa0b6e62cac771f1a489f52cc07cccf38efc8bc7579463ec9ba09038495f02ce104cbd2ae62a5b739b1003a655f0c1dda", 0x69}, {&(0x7f0000000480)="ac9752daa87c40486f9bb5c416ebcae52eff4e0bd57d931fc8a0031f09eddeebe6c13ab03c2b0ae6d5e39e82705bd50a4c6f924886cf745d30757cdc2d086a472cc584291393e249a5dbbac4b30b5473cb63e13dcf85773010a99a9463a19820360c6289d903bbb1296b26c20487eedba29e8d43d06831bf48f6f2eacd778d2c04", 0x81}, {&(0x7f0000000540)="3bb82b18a71c844f2eff9475b8de74093fe177418f9dcdfc5990a9d755d8d3bba37260b17140acffb3c9054e233436368777b9b608374c62046bfe04e2988eac5a748afc12d66becfcb322a0c0aa1de58965d31a9dd65846faeee5ccd227cc22e0a93da8885bbdf4a4390c277a9cad0d16bc1c8813a47573088d34b8dd3beff4228e5c53791a675d131321cc242c597b6ed38b2ee54523d10c7dfd1d9fb46f7c3ccd5bfa47e1c56f82fe50e0dd8768548d92720ac53fa89f909db2255e3901d2207163fcf06c59d240e5651f172856ce6008f7f24b4b59441a1f3a7d5ecea1840e13a65274c8dcf3762b7457a5d320a50a7a9c948aab7064", 0xf8}, {&(0x7f0000000640)="f374452318e49d246826183dc07d7c1ee55d60457d1411a9c68368ff1a2f192129edeff04e0ca7679874710cc0ea60c5d16ccbe129960cd3de2e4cc4cf72e41d76c276a505a34cb1a7d859d9dbb2d62db0ed12695a1f38451d16713b4fc51cca7d6d153fc53f1c94949556df2e22e49be091fe426e588b18d1b915573d22ed2aae648ff107a71f5ab247c26fb05634ee9de680", 0x93}, {&(0x7f0000000700)="36265e10f2b1b1c63a07855abb7a08063f7002b3c509e367948e2c1db403cb60e79c5615fa4d13e8923ebaee199d5201ae93564c7c0d49d598cb71a27df80c9ba7895a22633655cc66ef1b72e7ccae7a3076dc494061e7011e5b06e91fac5d1cad598ba6c61a15ccfcfc640a603d670ed0e23585836a6d49f3d45c68fdc1b4b6606a6d98c5578eb99caa85892c8a25c9a727a58b0f2943b9dfe224769db953d28bdc2cdec8851aa6554d025ef2a2d744b270108e8f57b7eb92776c0b526415324873b5e367214fccc5804ebaddf1a56296d7645ec533f68b7dc5b140364b89", 0xdf}, {&(0x7f0000000800)="2194d623", 0x4}, {&(0x7f0000000840)="dc88b38d723669d2fd11cbebca42f9c157f0ecf379d199c6278e1fd811ba7f0fd2b4c232", 0x24}], 0x8) getsockopt$SO_COOKIE(r1, 0x1, 0x39, &(0x7f0000000900), &(0x7f0000000940)=0x8) r2 = msgget(0x1, 0x1) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000980)=""/4096) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000001980)=""/156) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000001a80)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001a40)={0xffffffffffffffff}, 0x0, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r1, &(0x7f0000001ac0)={0x8, 0x120, 0xfa00, {0x1, {0x1, 0x2, "6bb0df602183bddd25002a7fb9e701be35e6ad9c7e9db3df7911e79614252ae904010a2e8685b80e9b592389d41cda587ab486eda8df844ffa4d44e7e8a6bb9b6355404ac2120dd9908781c737c387d6d2ce698832b060fa8210a4a155e0f329b01e98d75b8388d3fe1da2d56b5bd7e09f837f5391610d1d80c25904c6c37d4e2d0da4193ac81cec256ae051767df9d06ddbdbfba4e2cc48e465ac1b226fb974409de8c6c44d25a59fee9f30279995f06cba09472ff30e3d4d84f93e1793690ae4a91a1607c8343c0e63b5ef769e697440c7b16a945bc2a8e2721f05e9d92eaa7fc8c7cc5e18e2ba8d6c973b5a2bd70a2438d97430cb830efd6305f73249287a", 0x79, 0x400, 0x100000000, 0x0, 0x4, 0x5, 0x8}, r3}}, 0x128) ioctl$SG_GET_VERSION_NUM(r1, 0x2282, &(0x7f0000001c00)) pwritev(r1, &(0x7f0000004080)=[{&(0x7f0000001c40)="abd94b32057ad3d26a1130f4329fdefe165016f5f87050d0106a06f95ff9be5da1e4d9e73c4e328809306c464a99685e5d0a818a23976bd4935f84b3900e8683bbf1498e68a2062cdd643d05a1328a5e7f77ce6e923640ec16e01acbad12097e2d08c9158b5883f925721d4a828e61d6485c3fac769c165c46d91a733871cef35baba81ab51a05a9e7dc2a242ed3ba602142f79d4f11aa", 0x97}, {&(0x7f0000001d00)="050edd8efac3e995a76bcea2e3c4a330f89efa5c0c980d53369c70996fc9305af36524a48cd64d8419e8314b4937824b115883d777b2a2869c24be4265b9b7d3c8d87868a17beb07c6e58bee33f98caa09de090964753d4f9cbb33a9e9f643769450af2e05dd081d3e0eeb511c2c9a01", 0x70}, {&(0x7f0000001d80)="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", 0xff}, {&(0x7f0000001e80)="c424980afed5b8bd5cabd91e1973ddf774e0c3ab444194c020f75780fcade5d03ddef5164c44632d5f2b28fa14a6cd33243ad298bea5f64b23c6466e83911495c53582ebafb641bfa8acf5937762a6861492ebcd6da97e7d452871cf9f34a465466cd2f93b6ef780e260b8279e1cc05eac626638762b1362ba1d7fbc8c460b3f3506724d7a755342301c11f3f3302676cd13f6f5db290e7e2b72587562b85a5938aa3034fe77743bdaf85e9844db7c5109add175f1584b226382c3a2ccb0e73536a36148038a4e3232c50e490c54b3d5f1089fb0b732ac32b8266ccf7c21b007dda9ccf3", 0xe4}, {&(0x7f0000001f80)="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", 0x1000}, {&(0x7f0000002f80)="7f8f98bec905fac8453c33b105d12f1cd65bfd64c821e65bd90ab50c8659124d47f848daf05745b26a1f576d10ef40f6acdd4870b87f3faeb6caded728669225004d38f932c41c67dbfe6c8441", 0x4d}, {&(0x7f0000003000)="3a260ba0d7e400cbf8bcbc03ef", 0xd}, {&(0x7f0000003040)="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", 0x1000}, {&(0x7f0000004040)}], 0x9, 0x0) r4 = syz_open_dev$ndb(&(0x7f0000004140)='/dev/nbd#\x00', 0x0, 0x2440) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000004180)={0x0, 0x3, 0x3, 0x4, 0xfffffffffffffeff, 0x6, 0xffffffffffffff01, 0x101, {0x0, @in6={{0xa, 0x4e21, 0x0, @empty, 0x1}}, 0x3, 0x1f, 0x8, 0x401, 0x1}}, &(0x7f0000004240)=0xb0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000004280)={r6, 0x2, 0x5}, 0x8) sendto(r1, &(0x7f00000042c0), 0x0, 0x4000000, &(0x7f0000004300)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) sendmsg$nl_crypto(r1, &(0x7f0000004440)={&(0x7f0000004380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000004400)={&(0x7f00000043c0)=@delrng={0x10, 0x14, 0x1, 0x70bd2b, 0x25dfdbfb, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x1}, 0x8004) recvfrom(r1, &(0x7f0000004480)=""/225, 0xe1, 0x10102, &(0x7f0000004580)=@in={0x2, 0x4e22, @multicast2=0xe0000002}, 0x80) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000004600)={r5, 0x2209, 0x10}, &(0x7f0000004640)=0xc) sysfs$1(0x1, &(0x7f0000004680)="c4757365727070703070707031292e00") getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f00000046c0), &(0x7f0000004700)=0x18) statfs(&(0x7f0000004740)='./file0\x00', &(0x7f0000004780)=""/236) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000004880)={0x0, 0xffffffffffffff9c}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f00000048c0)={{0x0, 0x80000000}, {0x3, 0x2}, 0x1, 0x4}) ioctl$KVM_GET_EMULATED_CPUID(r1, 0xc008ae09, &(0x7f0000004940)=""/81) ioctl$SG_GET_PACK_ID(r1, 0x227c, &(0x7f00000049c0)) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000004a00)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f0000004a40)={0x40, 0x1}) 16:38:52 executing program 1: r0 = socket$pppoe(0x18, 0x1, 0x0) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300)='/dev/snd/pcmC#D#c\x00', 0x1, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000340)={0x1f, 0x3f, 0xffffffffffff2c03, 0x8}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000180)='\x00\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) write$binfmt_aout(r3, &(0x7f0000000780)={{0x1cf, 0xffffffffffffeba8, 0x8, 0x2e, 0x2bc, 0x3, 0x369, 0x9}, "d6b1f3e5efd7906ba5c89b6b03f851dbbe9c41c59bb6e8faf51c962a789187d81e84bed3678595ae36157b18adef507a8d1102624f78ab3f2d92deb409c8e76babe8265c5f6b31cb7fb1d06b7ca6ba48157a284e587bc45d795c3a349556ea2a0ae5710ca1ec06b6c5db7fb63590939f50608fe882c1ea640d24abfdd72f", [[], [], [], [], [], [], [], [], [], []]}, 0xa9e) r4 = msgget(0x3, 0x100) msgctl$IPC_RMID(r4, 0x0) 16:38:52 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 232.892063] ntfs: (device loop5): parse_options(): Invalid uid option argument: 0x00000000ffffffff 16:38:52 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0xfffffffffffffe5d, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x810}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r1, 0x28, &(0x7f0000000180)}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 232.953737] ntfs: (device loop5): parse_options(): Invalid uid option argument: 0x00000000ffffffff 16:38:52 executing program 5: mkdir(&(0x7f0000002a80)='./file0\x00', 0x0) r0 = perf_event_open(&(0x7f0000000000)={0x4, 0x70, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x200000000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, 0xf3, &(0x7f0000000380), &(0x7f0000000280)=""/243, 0x0, 0x8}, 0x28) r1 = gettid() read(r0, &(0x7f0000000380)=""/4096, 0x1000) ptrace$peekuser(0x3, r1, 0xffffffff) mount(&(0x7f00008deff8)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f000015bffc)='nfs\x00', 0x0, &(0x7f0000000000)) 16:38:52 executing program 7: syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xfffffffffffffffc, 0x2) r0 = socket(0x1, 0x1, 0x0) bind(r0, &(0x7f0000000040)=@un=@file={0x1, './file0\x00'}, 0x80) [ 233.355941] binder: BINDER_SET_CONTEXT_MGR already set 16:38:52 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000200)="48d0c8357b65f5365ff064d9c9b1af5cb15331f2fedb809ad2ab9b966975e4157f5ef14f8b0cd96ee0ddcd3a074f9b27868da92009be8ed51f8d30ada53228f5b6db07d8874fbfeeca8dbbff3e2276ca4d8d53554efc02", 0x172, 0x4000, &(0x7f0000030ff0)={0x2, 0x4e23, @rand_addr=0x2}, 0x10) sendto$inet(r0, &(0x7f0000000100)="9f460e7d253e60eef6acc4051ab4f79b78078e88cf6e8098df4f3b1e29d66a8682a516835de83ef46548f9894d57ddd6408ab4f2b361d5b809c27ec204d17327141fdf34e56b89ce529ae266f7653782", 0x1, 0x400000000000000, &(0x7f0000000000)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x52) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYBLOB="b008f578ca79d004920ac4730d05eb85f35f10adb5b4e9d645ca13ca43a1befbe1f8db4508d3660f5838656b6eb5949a6e"], 0x8) [ 233.383627] binder: 14396:14400 ioctl 40046207 0 returned -16 [ 233.407532] binder: 14396:14400 IncRefs 0 refcount change on invalid ref 1275068416 ret -22 [ 233.416492] binder: 14396:14400 BC_ACQUIRE_DONE u0000000000000000 no match [ 233.492566] binder: 14396:14444 IncRefs 0 refcount change on invalid ref 1275068416 ret -22 [ 233.501320] binder: 14396:14444 BC_ACQUIRE_DONE node 854 has no pending acquire request 16:38:53 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:53 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) r1 = dup2(r0, r0) ioctl$EVIOCSFF(r1, 0x40304580, &(0x7f0000000000)={0x55, 0x800, 0x0, {0x40, 0x10001}, {0x7, 0x200}, @const={0x5, {0xbefce34, 0x5a6a, 0x20, 0x6}}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f0000000000), &(0x7f0000000080)=""/233}, 0x18) 16:38:53 executing program 7: socket$key(0xf, 0x3, 0x2) 16:38:53 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1f, 0x1, 0x0, &(0x7f0000000740)) 16:38:53 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1000000000000001, 0x18801) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000200)=""/21) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000040)=0xd5) 16:38:53 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2002, 0x0) ioctl$KVM_GET_IRQCHIP(r0, 0xc208ae62, &(0x7f0000000040)={0x0, 0x0, @ioapic}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) fcntl$lock(r0, 0x7, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x8, r1}) ioctl$TUNSETGROUP(r0, 0x400454ce, r2) fcntl$setstatus(r0, 0x4, 0x42400) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000200)={0xffffffffffffffff, {{0xa, 0x4e24, 0x40, @empty, 0x6}}, {{0xa, 0x4e22, 0x3, @loopback={0x0, 0x1}, 0x5}}}, 0x108) ioctl$KVM_SET_NR_MMU_PAGES(r0, 0xae44, 0x465f420d) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000340)=0x8, 0x4) getsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000380)=""/4096, &(0x7f0000001380)=0x1000) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f00000013c0)={{0xa, 0x4e22, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0xf0}, {0xa, 0x4e22, 0x8, @dev={0xfe, 0x80, [], 0x21}, 0x1}, 0x3, [0x7f, 0x10001, 0x5, 0x9, 0x4, 0xbe8, 0x7f, 0x8000]}, 0x5c) syz_mount_image$jfs(&(0x7f0000001440)='jfs\x00', &(0x7f0000001480)='./file0\x00', 0x9, 0x7, &(0x7f0000001840)=[{&(0x7f00000014c0)="901645c0d1", 0x5, 0x7}, {&(0x7f0000001500)="e7d391b62ab607d8040d6280d7d1e9234a0f1d3946e3d12188cc9f0576d0ed0639acdb66d5fed95a6e27efd1b64fc87fac8def90c0d05feeca46b591d5cb2f0c820b645d1fa02f80bf0249b99590ea5eb2226de5ac5ad61b43392cbc0dae322b63335388633ffd835946143ae1a3d64d1d63ccc9fc0b2b15a6fe0cb0cc68c7b6e726b4fd2aa29c6b4c2410413a0a91", 0x8f, 0x8}, {&(0x7f00000015c0)="915f74123de5222a883dd423ba15db8f27979e81d746e7b82f543c6a", 0x1c, 0x8}, {&(0x7f0000001600)="b46693d3d75691c758c33d1667749a43d0e026391c8ced21f5035cf85f0d551c84f1f4f503c757c1ca01e40dc368eb78e9320bb6af97b17bfd0f2d2a4139b6b73049f469fc5a156bbb050ebd0800c3d0ecb5c3f02cc190df1dbdffe3f2a8741f3b73082169ac86464a9fa8b4fea96beaafad397acac6cba14e9d1ab23e299800f1bdd9aecaffebd7531a", 0x8a, 0x6d5c139e}, {&(0x7f00000016c0)="36eaa2333f9968c1f350d8c508fdd4504c501ef892848731ce2218de6d3008a76ae09468ea1d63a398cf4bb204233dd0434147f538799515587eb6", 0x3b, 0x4}, {&(0x7f0000001700)="2fd0f55a50cb755099a09d2ba701ce1c3739ac060b912fc2af6dc1cf5c2d8c98745d0f2c20d9b64581d91b724506244f4f50035af527561affb76c266277ee1ee97e179a8af00b5cb428349819ece5deb8aaed9cb847af1ecc097aca3ba09fa2c02c6570934609be76f1edf13ecb38d92a848dd4ee1af1bb26bbf4554e4544213c63", 0x82, 0x6}, {&(0x7f00000017c0)="2db6f21de1e6e2863de6f17b7832257179d91e7567bbd03b0800bddcc90eba527a919980152858a98d6770afce5ed222286f00178c7f2c759a936957670244ba397dc09e0f7603076f4d311b132a1feca957b0ca166054281d394143a2a2c077b1f3396739d00e1e3bce9ba297f8c97997a8a5212b120e8693", 0x79, 0x5}], 0x84, &(0x7f0000001900)={[{@usrquota='usrquota', 0x2c}]}) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000001940)={0x0, 0x636c}, &(0x7f0000001980)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f00000019c0)={0x3, 0x0, 0x8, 0x7, 0x1, 0x40, 0x6, 0x7ff, r3}, &(0x7f0000001a00)=0x20) shutdown(r0, 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000001a40)=0xfffffffffffffffb, 0x8) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/autofs\x00', 0x20200, 0x0) write$P9_RSTATFS(r0, &(0x7f0000001ac0)={0x43, 0x9, 0x2, {0x6, 0x69f, 0x3ad, 0x4, 0x4, 0x6, 0x0, 0x0, 0x6}}, 0x43) r5 = syz_open_dev$amidi(&(0x7f0000001b40)='/dev/amidi#\x00', 0x7, 0x200) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r4, &(0x7f0000001c00)={0x10, 0x30, 0xfa00, {&(0x7f0000001bc0)={0xffffffffffffffff}, 0x2, {0xa, 0x4e20, 0x9b, @mcast2={0xff, 0x2, [], 0x1}, 0x4}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000001c40)={0x11, 0x10, 0xfa00, {&(0x7f0000001b80), r6}}, 0x18) setregid(r2, r2) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000001cc0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001c80)={0xffffffffffffffff}, 0x117, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000001d00)={0xa, 0x4, 0xfa00, {r7}}, 0xc) recvmmsg(r5, &(0x7f0000005b80)=[{{&(0x7f0000001d40)=@vsock, 0x80, &(0x7f00000031c0)=[{&(0x7f0000001dc0)=""/252, 0xfc}, {&(0x7f0000001ec0)=""/186, 0xba}, {&(0x7f0000001f80)=""/176, 0xb0}, {&(0x7f0000002040)=""/4096, 0x1000}, {&(0x7f0000003040)=""/175, 0xaf}, {&(0x7f0000003100)=""/166, 0xa6}], 0x6, &(0x7f0000003240)=""/4096, 0x1000, 0x5}, 0x100}, {{0x0, 0x0, &(0x7f00000043c0)=[{&(0x7f0000004240)=""/182, 0xb6}, {&(0x7f0000004300)=""/26, 0x1a}, {&(0x7f0000004340)=""/10, 0xa}, {&(0x7f0000004380)=""/40, 0x28}], 0x4, 0x0, 0x0, 0x7106000000000000}, 0x1}, {{&(0x7f0000004400)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005a00)=[{&(0x7f0000004480)}, {&(0x7f00000044c0)=""/223, 0xdf}, {&(0x7f00000045c0)=""/185, 0xb9}, {&(0x7f0000004680)=""/58, 0x3a}, {&(0x7f00000046c0)=""/251, 0xfb}, {&(0x7f00000047c0)=""/187, 0xbb}, {&(0x7f0000004880)=""/185, 0xb9}, {&(0x7f0000004940)=""/4096, 0x1000}, {&(0x7f0000005940)=""/43, 0x2b}, {&(0x7f0000005980)=""/98, 0x62}], 0xa, &(0x7f0000005ac0)=""/163, 0xa3, 0x101}, 0x4}], 0x3, 0x10062, &(0x7f0000005c40)={0x0, 0x1c9c380}) mkdir(&(0x7f0000005c80)='./file0/file0\x00', 0x40) sendmsg$nl_crypto(r5, &(0x7f0000005e40)={&(0x7f0000005cc0)={0x10, 0x0, 0x0, 0x20080000}, 0xc, &(0x7f0000005e00)={&(0x7f0000005d00)=@get={0xf0, 0x13, 0x310, 0x70bd25, 0x25dfdbfc, {{'drbg_pr_hmac_sha512\x00'}, [], [], 0x400, 0x400}, [{0x8, 0x1, 0x7f}, {0x8, 0x1, 0x2}]}, 0xf0}, 0x1, 0x0, 0x0, 0x24004000}, 0x44000) setsockopt$sock_void(r4, 0x1, 0x1b, 0x0, 0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000005e80)=r1) getsockopt$inet6_buf(r4, 0x29, 0x1f, &(0x7f0000005ec0)=""/75, &(0x7f0000005f40)=0x4b) 16:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:53 executing program 7: r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000040)=r1) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x64, &(0x7f0000000180)=[@in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e21, 0x9, @loopback={0x0, 0x1}, 0x4}, @in6={0xa, 0x4e22, 0x5, @mcast1={0xff, 0x1, [], 0x1}, 0x8}, @in6={0xa, 0x4e22, 0x1, @loopback={0x0, 0x1}, 0x4}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000280)={r3, 0x1f, "3645312d392ee1acc59fb7ff045b2d9e43df2f3a51e22a6a1b74cbaa4c8f7e"}, &(0x7f00000002c0)=0x27) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f00000000c0)=@broute={'bropte\x00', 0x20, 0x1, 0x340, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000140), &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x462) [ 233.928506] kernel msg: ebtables bug: please report to author: Wrong len argument [ 233.982963] IPVS: ftp: loaded support on port[0] = 21 16:38:53 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x700}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:38:53 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x800000000002, 0x300) ioctl$KDDELIO(r1, 0x4b35, 0x80000) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f000095bffc)={0x0, 0x0, 0xfffffffffffffffc}, 0x4) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) socket$inet(0x2, 0xfffffffffffffffe, 0x4) sendto$inet(r3, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) sendto$inet(r1, &(0x7f0000762fff), 0xfdc7, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1=0xe0000001}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa008100000086dd6050a09c00080000fe800000002c0000000000000000002998abcb8449afe4bbfe8000000000000000000000000000aa0000000000089078"], &(0x7f0000000040)) 16:38:53 executing program 3: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x800, 0x0) r1 = fcntl$getown(r0, 0x9) rt_sigqueueinfo(r1, 0x29, &(0x7f0000000040)={0x40, 0xffffffffffff8000, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000140)={0x2, 0x70, 0x6, 0x9, 0x8, 0x7, 0x0, 0x2, 0x40201, 0x7, 0x9, 0x8000, 0x9, 0x4, 0x3, 0x1, 0x3f, 0x5, 0x2000000, 0xffff, 0x7, 0xffffffff, 0x0, 0x25e, 0x0, 0xd73, 0x8, 0x4, 0x8, 0x4, 0x3, 0xffffffff80000000, 0xa4be, 0x6, 0x8, 0x100000000, 0x3, 0x8, 0x0, 0xe54e, 0x2, @perf_config_ext={0x7ff, 0x5}, 0x4, 0x7f, 0x7fffffff, 0x6, 0x2, 0x0, 0x7}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000001480)={0xfffffffffffffe00, 0x7, 0x0, 0x8, 0x36e, 0x1f}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000080)=@in={0x2, 0x0, @loopback=0x7f000001}, 0x10, &(0x7f0000000100)=[{&(0x7f00000001c0)="008d", 0x2f7}], 0x1, &(0x7f00000001c0)}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000015c0)='tls\x00', 0x4) syz_mount_image$f2fs(&(0x7f00000000c0)='f2fs\x00', &(0x7f0000000240)='./file0\x00', 0xfffffffffffffffa, 0x3, &(0x7f0000000380)=[{&(0x7f0000000480)="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", 0x1000, 0xffffffff}, {&(0x7f0000000280)="2f327da05391c1c030e7b082ff57ab6e98d2d7c162f5c3343d6e863e28ca9cad79ed000c86a35c9b75544739be9f11ddb2030d5988cb3bc71cbd78a7dd9029851faa7d79e3e2f92ccff44f713cfc58e492c4ddc84f53b73c1aaaa3d420ae92fff373827d84f6b4c42fd414712ca5b37c5a09eff2e52dff6c52d5f80744983ceadb6f2a3dd3664c2753de40410a9e7e6ed0c2c0b13c90daeffe", 0x99, 0x7f}, {&(0x7f0000000340)="1d23dd6a", 0x4, 0x6}], 0x184000, &(0x7f0000001500)=ANY=[@ANYBLOB="61636c2c6e6f6c617a7974696d652c004fdb0dea99884afb460678888b4972d413a48514100179e24447591b1560b38fb91a0ec40c2c20b2e7636e1b72027e865e46c69b2c727faf5a959b8045665bb24f5d4020343ef46f4f3a80c5aa44f6b001596078eb665b056e6932bb0e62807c00d3e2cdedabef53c7e175bc9c"]) r2 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x34, 0x0) timer_create(0x3, &(0x7f0000000400)={0x0, 0x31, 0x1, @tid=r1}, &(0x7f0000001580)) syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000000)={0x0, 0x97}, 0x8) r3 = semget(0x3, 0x3, 0x249) semctl$SETVAL(r3, 0x7, 0x10, &(0x7f0000001600)=0x800000) ioctl$int_out(r2, 0x810c5701, &(0x7f0000000100)) 16:38:53 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc83d7080ea7071679f9d67e3fafd2dd18f94d28b68443785c76bdf0e9e23563f1c5c50c5c9b04f082a5f96ad21e40000cd8a954a0228c53a87e0c8bb747adba3722bda34f573fe5b3944b05a21dc768fc0745e5c73ed52e6a11f79875490193c1adf455082e9406b34ff0f9785d679f21afe68e32f2cbfbc97ac1f777aaa60") r1 = socket$inet(0x10, 0x3, 0xc) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000100)="24000000080307031dfffd946fa2830020200a0009000100021d85680c1baba20400ff7e28000000110affffba16a0aa1c0009b356da5a80d18bec4c8546c8243929db2406b20cd37ed01cc0", 0x4c}], 0x1}, 0x0) 16:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:53 executing program 3: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000400)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9030000ec00000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = shmget$private(0x0, 0x3000, 0x40, &(0x7f0000ffc000/0x3000)=nil) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000004, 0x40012, r0, 0x0) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) getresgid(&(0x7f00000000c0), &(0x7f0000000180), &(0x7f00000001c0)) r2 = syz_open_dev$dspn(&(0x7f00000004c0)='/dev/dsp#\x00', 0x54, 0x800) sendmsg$kcm(r2, &(0x7f0000000dc0)={&(0x7f0000000a40)=@in6={0xa, 0x4e24, 0x68, @ipv4={[], [0xff, 0xff], @multicast1=0xe0000001}, 0xcef}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)="748c33713d070eff60b666aef22679d152cfde3f4f28e41ccd6af04af81440422cbd2b01fffba33b483cba5d04141a5b0fac6da4d59ec127642c30b8d4", 0x3d}, {&(0x7f0000000b40)="f819eabf5d1b02bde5af8e71ffb1da", 0xf}], 0x2, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], 0x120, 0x4}, 0x4000010) ioctl$KDDELIO(r2, 0x4b35, 0x401) ioctl$KDGKBLED(r2, 0x4b64, &(0x7f0000000b00)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, &(0x7f0000000300)=0xe8) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000380)=0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000a00)={r2, &(0x7f0000000900)="2831b30c9a8fb19ff9197f69e80cecb1c583f8a0729a5a2f243c39c1555daafea6236a0227c081037ccfae76a749bd8c610189abc0af8782368a540c5f40ce8911", &(0x7f0000000980)=""/105}, 0x18) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000006c0)) r5 = openat(0xffffffffffffffff, &(0x7f0000000580)='./file0\x00', 0x220402, 0x2) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000008c0)={r2, &(0x7f0000000740)="cac19b14064823637c2fce45577f65bd9f586dce17ed3bd76861793c8e5f0f54ff2dc2803041a66eb8b027ecdb1418f651a8d48e5d8dad5887bd3e9f3d4be3de606987dc70fb07eef769cac5596f18d3ec61257afe197dd94072925fc6fb11e55f902a4efc339f2a47cc554250ebb745cff52e8f0a1e1cec090a343a4701a1a5f05969dd7d017b715584411e30d111762b227e31481b13003fb6d18b01a243d8f190816fe8ca754acbd916377b3675c99365036d688c0310870116", &(0x7f0000000800)="13e2828e84aaf7b36fc8df46783a533d25d55d8ecd7707a10043638bedea48800b6e1b56515f70daf8f1d2c4d3e405585beb71a8f82e8e2eb1077b8c7e1eb2adeeb48080c9d530948572ba58f0b0b619dbd55afad1f2d660e4f8b69afab72ab521c0cf5782b89b5e3b1d93908000c4997866c9371c04a958182cd34a5804d448d10d2d8cddae5298b952ec33baa420c529e5cdd6ebaa91976f5604b5", 0x1}, 0x20) sendmsg$can_raw(r5, &(0x7f0000000680)={&(0x7f00000005c0)={0x1d}, 0x10, &(0x7f0000000640)={&(0x7f0000000600)=@can={{0x4, 0x8000, 0xc0, 0x5}, 0x7, 0x1, 0x0, 0x0, "5afc21dbd260e625"}, 0x10}, 0x1, 0x0, 0x0, 0x81}, 0x80) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000d80)={'vcan0\x00', 0xa000}) fcntl$getownex(r5, 0x10, &(0x7f0000000700)={0x0, 0x0}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000e00), &(0x7f0000000e40)=0x11) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000d40)={r2, 0x28, &(0x7f0000000d00)}, 0x10) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, r3, 0x40, 0x1ff}, 0x7, 0x0, 0x4, 0x5, r4, r6, 0x7fff}) ioctl$KVM_GET_REG_LIST(r0, 0x400452c8, &(0x7f0000000140)=ANY=[@ANYBLOB="0070ffff00000000"]) [ 234.266623] EXT4-fs (loop3): VFS: Can't find ext4 filesystem 16:38:53 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:38:53 executing program 3: r0 = open(&(0x7f00009e1000)='./file0\x00', 0x8040, 0x0) fcntl$setlease(r0, 0x400, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={0xfffffffffffffffc}, 0x0, 0x8) rt_sigtimedwait(&(0x7f00005a1000)={0xfffffffffffffffd}, &(0x7f0000d31ff0), &(0x7f00007adff0)={0x77359400}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000140)={r2, 0x3dc2}, &(0x7f0000000180)=0x8) acct(&(0x7f0000000040)='./file0\x00') openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) fcntl$setlease(r0, 0x400, 0x3) [ 234.345326] netlink: 20 bytes leftover after parsing attributes in process `syz-executor7'. [ 234.355714] binder: BINDER_SET_CONTEXT_MGR already set [ 234.367291] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 234.392213] binder: 14501:14503 ioctl 40046207 0 returned -16 [ 234.403447] binder: 14501:14503 IncRefs 0 refcount change on invalid ref 1792 ret -22 [ 234.411775] binder: 14501:14503 BC_ACQUIRE_DONE u0000000000000000 no match [ 234.475270] binder: 14501:14519 IncRefs 0 refcount change on invalid ref 1792 ret -22 [ 234.483509] binder: 14501:14519 BC_ACQUIRE_DONE node 859 has no pending acquire request 16:38:54 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:38:54 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='westwood\x00', 0x9) ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:38:54 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000009c0)={0x26, 'aead\x00', 0x0, 0x0, 'morus640\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[], 0x0) recvmsg(r1, &(0x7f0000000480)={&(0x7f0000000200)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000040)=""/55, 0x37}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000140)=""/85, 0x55}, {&(0x7f0000000580)=""/215, 0xd7}, {&(0x7f0000000680)=""/137, 0x89}, {&(0x7f0000000300)=""/38, 0x26}, {&(0x7f0000000740)=""/130, 0x82}], 0x7, &(0x7f00000008c0)=""/233, 0xe9}, 0x0) 16:38:54 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") accept4(r0, 0x0, &(0x7f0000000000), 0x80000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'tgr160-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x159, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3}], 0x24}], 0x4924924924924b1, 0x0) [ 235.681608] Process accounting resumed [ 235.696457] Process accounting resumed [ 235.715900] IPVS: stopping backup sync thread 12389 ... [ 237.605835] team0 (unregistering): Port device team_slave_1 removed [ 237.616532] team0 (unregistering): Port device team_slave_0 removed [ 237.629743] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 237.648420] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 237.676212] bond0 (unregistering): Released all slaves [ 237.993207] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.999654] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.007227] device bridge_slave_0 entered promiscuous mode [ 238.049905] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.056493] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.063842] device bridge_slave_1 entered promiscuous mode [ 238.106261] IPv6: ADDRCONF(NETDEV_UP): veth0_to_bridge: link is not ready [ 238.146644] IPv6: ADDRCONF(NETDEV_UP): veth1_to_bridge: link is not ready [ 238.260212] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 238.303127] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 238.481498] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 238.488937] team0: Port device team_slave_0 added [ 238.528272] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 238.535738] team0: Port device team_slave_1 added [ 238.576302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 238.619448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 238.661769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 238.704095] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 238.711287] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 238.727185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 239.086450] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.092865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.099529] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.105923] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.113450] IPv6: ADDRCONF(NETDEV_UP): bridge0: link is not ready [ 239.713173] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 239.978531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.063627] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 240.146702] IPv6: ADDRCONF(NETDEV_UP): veth1: link is not ready [ 240.152973] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 240.160763] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 240.241912] 8021q: adding VLAN 0 to HW filter on device team0 16:39:00 executing program 6: connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc1105511, &(0x7f00000000c0)={0x3, 0x6, 0x8, 0xfffffffffffffffc, "1059493481b639195a8a2dd9ee3ff7e9c50e58fe75430138d7f00cfe322bea8af5c4de2e32bb0a6e99f963f4", 0x5}) 16:39:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x7a00}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:00 executing program 7: r0 = syz_open_dev$sg(&(0x7f0000007ff7)='/dev/sg#\x00', 0x0, 0x806) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1f, 0x400000) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000080)={{0x7, 0x0, 0xfffffffffffffff7, 0x1ff0, 'syz1\x00', 0x40}, 0x1, [0x3f, 0x800, 0x80000000, 0x5, 0x5, 0x8c0, 0xfffffffffffffffe, 0x100000001, 0x2, 0x3f, 0x400000000000000, 0x4, 0x0, 0x6de1, 0x3ff, 0xf79, 0x1f, 0x0, 0x80000000, 0x44ce5622, 0x2c7, 0x80, 0x2, 0x4, 0x80, 0x9, 0x5, 0x8, 0x7fff, 0x800, 0xffffffffffffffb4, 0x2, 0x101, 0x800, 0x9, 0x3, 0x8, 0x800, 0x4, 0xffffffffffffff2c, 0x1000, 0x5, 0x7ff, 0x6, 0x6, 0x5, 0x10000, 0x80, 0x4, 0x20, 0x0, 0x0, 0x0, 0x9, 0x13, 0xfffffffffffffff7, 0x5889, 0x0, 0x25ed, 0x4, 0x2e, 0x9, 0x9, 0x49, 0x5, 0x8, 0x80000000, 0x0, 0x2, 0x4, 0x2, 0xff, 0x6, 0x9d75, 0x1, 0x100000000, 0xfff, 0x1, 0x44c, 0x0, 0x0, 0xfff, 0x5, 0x80000001, 0x2, 0xeb95, 0x4, 0xfffffffffffffff9, 0x67, 0x7, 0x3e2, 0x1ff, 0x9, 0x8000, 0x1ff, 0x4, 0x45c, 0x1ff, 0x6, 0x10000, 0x7, 0x7ff, 0x0, 0x559, 0xff, 0xb9f, 0x4, 0x0, 0x5, 0x6, 0x9e05, 0x8ff, 0x1, 0x6, 0x2, 0x5, 0x100000001, 0x3, 0x101, 0x901c, 0x400, 0x3, 0x3d7, 0x4, 0x400, 0x0, 0x7, 0x8], {0x77359400}}) write$evdev(r0, &(0x7f0000813fd0), 0xdf) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) 16:39:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:00 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:00 executing program 3: capset(&(0x7f00000fc000)={0x19980330}, &(0x7f000047efe8)) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='at\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00') syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0x0, 0x802) fstat(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, 0x0, r1) 16:39:00 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f00000000c0)={{0x2, 0x4e22, @multicast2=0xe0000002}, {0x306, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x5a, {0x2, 0x20, @loopback=0x7f000001}, 'tunl0\x00'}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x200000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000240)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="12634840030000000000000002000000000000000000000001000000000000000000000018000000000000001000000000000000", @ANYPTR=&(0x7f0000000500)=ANY=[@ANYBLOB="852a6a77a591f096", @ANYRES64=r2, @ANYBLOB="30f7f7ff000000000f4c42f4e1fb7ec5ea7d239588b6cd8f8f7c578c0bbe4a891d24a3ea111f45dd86d52bf7be0bf7febb8e05967072b3e88513039ab777d912ecaee9c497247d000e8c260b9ed5048789e8d061e86e433681b5f1218c"], @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="78000000000000004ee413c07ddb29cd"], @ANYBLOB="30ffffffffffffff"], 0x98, 0x0, &(0x7f0000000440)="adde7b42c2752a36b83b1d0b26dbc041e6c6d6d0e156aa41bc11affe58ac2b37beee109da8caf9166a8c38768571bf2e384a3de56b161eaae87769f9100bef80889104c8be2e2cf5d416f425ec587be15f62ca17105cd6696d27f17e1a5035b70b6cc685d586624cc9045947e1e25408ca48c7c8f9144bd549bfc29c64b99a548a95bca18ad603d7d2d213a3d65a5eafef44a896a46770fd"}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x400004, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x10205, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x100, 0x400) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x3, 0x1000000001, 0x1000}) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000600)=0x4, 0x4) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) clock_settime(0x4, &(0x7f0000000580)={r5, r6+10000000}) [ 240.826794] binder: 14827:14833 IncRefs 0 refcount change on invalid ref 31232 ret -22 [ 240.835123] binder: 14827:14833 BC_ACQUIRE_DONE node 862 has no pending acquire request 16:39:00 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_UNLOCK(r1, 0xc) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x9, 0x201) poll(&(0x7f0000000100)=[{r0, 0x40}], 0x1, 0x10001) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f00000000c0)=0x2, 0x4) ioctl$EVIOCGSW(r2, 0x8040451b, &(0x7f0000000240)=""/220) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000340)}}, 0x18) 16:39:00 executing program 7: r0 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x1, 0x100000001, 0x1) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000040), 0x4) 16:39:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:00 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') write(r0, &(0x7f00000003c0)="fa19a94bb752cdcf841c30435d620c87cad6ec31a007e678da0703ff25810dd9d4e0b94b44415542eebe5d02645df0b8fa3d84f6be800b44136870764bd780651d6636f3a1501ea51074e65d9b1a0d6b16d7c5fc861c447a72df73b978d857609ea341c1b3a8", 0x66) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x58, &(0x7f00000002c0)=[@in6={0xa, 0x4e24, 0x6e, @local={0xfe, 0x80, [], 0xaa}}, @in={0x2, 0x4e21, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0x7f, @mcast1={0xff, 0x1, [], 0x1}}, @in={0x2, 0x4e24, @broadcast=0xffffffff}]}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000380)={r3}, 0x8) 16:39:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x400) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) ioctl$EVIOCSABS20(r1, 0x401845e0, &(0x7f0000000040)={0x80000001, 0x1, 0x3f80, 0x3, 0xf5}) r2 = socket(0x1001000000010, 0x802, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000001000dff5000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000f70000000000180012001400010069703967726500000000000000060000"], 0x38}, 0x1}, 0x0) 16:39:00 executing program 3: mkdir(&(0x7f0000000200)='./file1\x00', 0x2) mount(&(0x7f0000000000)='./file1\x00', &(0x7f0000000880)='./file0\x00', &(0x7f0000000100)="72616d667304", 0x3, &(0x7f0000000140)) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f00000000c0)='\x00', 0x1, 0x0) r0 = syz_open_dev$mice(&(0x7f0000000140)='/dev/input/mice\x00', 0x0, 0x400) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000240)={0x3, 0x6}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x105083, 0x0) sendto$unix(r1, &(0x7f00000008c0)="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", 0x1000, 0x1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) 16:39:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4a05}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 240.911347] binder: BINDER_SET_CONTEXT_MGR already set [ 240.918286] binder: 14827:14833 ioctl 40046207 0 returned -16 [ 240.927324] binder: 14827:14847 IncRefs 0 refcount change on invalid ref 31232 ret -22 [ 240.935782] binder: 14827:14847 BC_ACQUIRE_DONE u0000000000000000 no match [ 240.940088] binder: BINDER_SET_CONTEXT_MGR already set [ 240.949268] binder: 14827:14833 ioctl 40046207 0 returned -16 16:39:00 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/uinput\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000140)={r1, 0x3, 0x30}, 0xc) pselect6(0x40, &(0x7f0000000080)={0x3ffffd}, &(0x7f0000768000), &(0x7f0000086000), &(0x7f0000349000), &(0x7f0000f14000)={&(0x7f0000a65ff8), 0x8}) 16:39:00 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 241.141759] binder: 14864:14871 IncRefs 0 refcount change on invalid ref 18949 ret -22 [ 241.150194] binder: 14864:14871 BC_ACQUIRE_DONE node 866 has no pending acquire request [ 241.174624] binder: BINDER_SET_CONTEXT_MGR already set 16:39:00 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) epoll_create(0x32) 16:39:00 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$ARPT_SO_GET_INFO(r0, 0x0, 0x60, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000180)=0x44) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:00 executing program 6: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x40d00, 0x0) io_setup(0x9, &(0x7f0000000240)=0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) io_submit(r1, 0x1, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000140)}]) 16:39:00 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x60}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:00 executing program 3: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @multicast2}}, &(0x7f0000000080)=0x80) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f00000000c0)={@mcast1}, &(0x7f0000000100)=0x14) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000740)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) [ 241.186774] binder: 14864:14871 ioctl 40046207 0 returned -16 [ 241.196880] binder: 14864:14875 IncRefs 0 refcount change on invalid ref 18949 ret -22 [ 241.199094] binder: BINDER_SET_CONTEXT_MGR already set [ 241.205097] binder: 14864:14875 BC_ACQUIRE_DONE u0000000000000000 no match [ 241.219373] binder: 14864:14871 ioctl 40046207 0 returned -16 [ 241.429277] binder: 14893:14904 IncRefs 0 refcount change on invalid ref 96 ret -22 [ 241.437359] binder: 14893:14904 BC_ACQUIRE_DONE node 870 has no pending acquire request [ 241.481714] binder: BINDER_SET_CONTEXT_MGR already set [ 241.490381] binder: BINDER_SET_CONTEXT_MGR already set [ 241.496228] binder: 14893:14904 ioctl 40046207 0 returned -16 [ 241.498791] binder: 14893:14913 IncRefs 0 refcount change on invalid ref 96 ret -22 [ 241.510151] binder: 14893:14913 BC_ACQUIRE_DONE u0000000000000000 no match [ 241.517815] binder: 14893:14912 ioctl 40046207 0 returned -16 16:39:01 executing program 0: clock_nanosleep(0x0, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) epoll_create(0x32) 16:39:01 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:01 executing program 3: bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000000)={0xffffffffffffffff, &(0x7f0000000040)="92424643bcbbf18973b6b46012fee5fa", &(0x7f0000001040)}, 0x18) 16:39:01 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000700)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0xffffffffffff7fff) 16:39:01 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) socket$inet6(0xa, 0x805, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) iopl(0x6) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000080)={0x2, 0x0, @ioapic={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, [{}, {}, {}, {}, {}, {}, {}, {0x0, 0x9, 0x0, [], 0xc0ffffff}]}}) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="0100000000000000f70b00000000000005000000000000a2772109326ecc92151afb00"]) 16:39:01 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) ioctl(r0, 0x200, &(0x7f00000002c0)="61c0846f808c9ad88b39ff666063ab62381357451dff105c95a6289e36f58c3b1eb9e67115f2a39ae8072b5b325b7df03e4deb3b89ca450e58c7c47ea47ccc19a3813eef08d1262604ede865fedf696c3ae351fed6cf06ba8b1b4e7c0d31b943e69ba3d2c029d1934b762c014bc7dc6511a1f0b66971fa78fd7bf9c36292fb6263d0390b44cdb86ff1334b9dd1d2652aaa727fa6e0ca2353fd2e12c7089ecf9f28f3f3584e87fa9e6b4a26e3c536d120921fa607df76d1c5ad4fb8b58cb52cc9bc72be8dcdaf41d4556dedd4f3252fa2f59b71a8b30ea0aa4228") socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000180)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0xcc6d010000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:01 executing program 4 (fault-call:7 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 241.816356] binder: 14923:14935 tried to acquire reference to desc 0, got 1 instead [ 241.824523] binder: 14923:14935 BC_ACQUIRE_DONE node 874 has no pending acquire request 16:39:01 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x40, 0x0) getsockopt$bt_sco_SCO_CONNINFO(r1, 0x11, 0x2, &(0x7f00000001c0)=""/59, &(0x7f0000000200)=0x3b) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = getpid() ioprio_get$pid(0x2, r2) r3 = fcntl$dupfd(r0, 0x0, r0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000040)={0x0, 0x6, 0x30}, &(0x7f0000000080)=0xc) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r4, @in={{0x2, 0x4e24}}}, 0x84) write$P9_RGETLOCK(r3, &(0x7f00000002c0)=ANY=[@ANYBLOB="35000000370100018100000000000000fdffffffffffffff", @ANYRES32=r2, @ANYBLOB="1700706f7369785f61636c5f73636365737323766d6e6574312dceae30f2c6821faf54f0534a00d18052dd601e5df967b137d5fd"], 0x35) 16:39:01 executing program 6: r0 = socket$netlink(0x10, 0x3, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000001fe8)={0xaa}) r2 = epoll_create1(0x0) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000019fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) close(r2) r3 = memfd_create(&(0x7f0000000100)='-/\'[\x00', 0x0) pwritev(r3, &(0x7f0000000000)=[{&(0x7f0000012000)="ca", 0x1}], 0x1, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x4}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r3, 0x80045300, &(0x7f0000000080)) write(r2, &(0x7f000014d000), 0xfffffd48) close(r1) sendmsg$nl_generic(r0, &(0x7f0000005000)={&(0x7f0000000040)={0x10, 0xf0ffffff00000f00}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x14, 0x15, 0x207, 0x0, 0x0, {0x2, 0xf0ffff, 0x600}}, 0x14}, 0x1}, 0x0) 16:39:01 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'kw(aes-fixed-time)\x00'}, 0x58) r2 = getpgid(0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e22, 0x75, @dev={0xfe, 0x80, [], 0x1b}, 0x70f}}}, &(0x7f0000000080)=0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000480)={r4, 0xda, "c9491173351e0453a51afc8c90969bd306d46e5269b5207c8f0885353c7575763c9edd4c3793803435e719094edc52d8532074041af9190c74908f0ebb8d03a5bd5e407611867bec18bad1c8e39fa3a50d60b7d88f3d9f3e9e3fa76de329153cdf1141a66afde38a39c297e9cfcad26d57cdf964f795736bfc14a8fc5d7f591fb58a2400fee5d764ecac2a6e8a8b6cc286b7eb287ccf79a1d3066d69f0fa0e5d7cd48201bd245e4c9a957dc616010c0beee74bfe0263c2d65c7f5691428ff7056375f6ff4a51a1e83a55755f906a140d5429ec78e9b2d69b6c70"}, &(0x7f0000000100)=0xe2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x20000000040002}, 0xfffffffffffffcd0) r5 = socket(0xa, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000000)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000440)) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000580)) fstat(r5, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setgid(r7) r8 = socket(0x10, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000d80)=[{{&(0x7f0000000600)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000680)=""/228, 0xe4}], 0x1, &(0x7f0000000780)=""/93, 0x5d, 0xc1}, 0x9}, {{&(0x7f0000000800)=@ax25, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000880)=""/140, 0x8c}, {&(0x7f0000000940)=""/207, 0xcf}, {&(0x7f0000000a40)=""/152, 0x98}, {&(0x7f0000000400)=""/9, 0x9}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/40, 0x28}, {&(0x7f0000000b80)=""/188, 0xbc}], 0x7, &(0x7f0000000cc0)=""/174, 0xae, 0x8001}}], 0x2, 0x10000, &(0x7f0000000e00)={0x77359400}) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f0000000e40)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in6=@mcast1={0xff, 0x1, [], 0x1}, 0xfffffffffffffff8, 0x0, 0x4e24, 0x3, 0xa, 0x20, 0x80, 0x2c, r9, r6}, {0x0, 0x8, 0x4879b448, 0x9, 0x5, 0x8, 0xfffffffffffffffe, 0x1ff}, {0x80000000, 0x7f, 0x40, 0x3}, 0x1, 0x6e6bbf, 0x3, 0x0, 0x1, 0x3}, {{@in=@multicast1=0xe0000001, 0x4d6, 0xff}, 0xa, @in=@broadcast=0xffffffff, 0x3503, 0x3, 0x0, 0x2, 0xffffffffffff5f24, 0x200, 0x2}}, 0xe8) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) setgroups(0x0, &(0x7f0000000000)) setresuid(r6, r10, r6) shmget$private(0x0, 0x4000, 0x1808, &(0x7f0000ffb000/0x4000)=nil) syz_genetlink_get_family_id$ipvs(&(0x7f00000005c0)='IPVS\x00') ptrace(0x4219, r2) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000040)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) 16:39:01 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) epoll_create(0x32) 16:39:01 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x3, 0x1, 0x0, &(0x7f0000000740)) 16:39:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 241.948507] binder: BINDER_SET_CONTEXT_MGR already set [ 241.955463] binder: 14923:14935 ioctl 40046207 0 returned -16 [ 241.964435] binder: 14923:14952 BC_ACQUIRE_DONE u0000000000000000 no match [ 241.965116] binder: BINDER_SET_CONTEXT_MGR already set [ 241.977733] binder: 14923:14935 ioctl 40046207 0 returned -16 [ 242.026011] FAULT_INJECTION: forcing a failure. [ 242.026011] name failslab, interval 1, probability 0, space 0, times 0 [ 242.037815] CPU: 0 PID: 14954 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #139 [ 242.045188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.054538] Call Trace: [ 242.057138] dump_stack+0x1c9/0x2b4 [ 242.060805] ? dump_stack_print_info.cold.2+0x52/0x52 [ 242.066010] should_fail.cold.4+0xa/0x1a [ 242.070091] ? page_add_file_rmap+0x781/0xe40 [ 242.074596] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.079704] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 242.084728] ? print_usage_bug+0xc0/0xc0 [ 242.088789] ? print_usage_bug+0xc0/0xc0 [ 242.092853] ? graph_lock+0x170/0x170 [ 242.096661] ? find_held_lock+0x36/0x1c0 [ 242.100717] ? __lock_is_held+0xb5/0x140 [ 242.104781] ? check_same_owner+0x340/0x340 [ 242.109097] ? reacquire_held_locks+0xbc/0x3e0 [ 242.113673] ? rcu_note_context_switch+0x730/0x730 [ 242.118600] __should_failslab+0x124/0x180 [ 242.122843] should_failslab+0x9/0x14 [ 242.126641] kmem_cache_alloc_node+0x272/0x780 [ 242.131239] ? print_usage_bug+0xc0/0xc0 [ 242.135322] ? lock_downgrade+0x8f0/0x8f0 [ 242.139469] __alloc_skb+0x119/0x790 [ 242.143196] ? skb_scrub_packet+0x580/0x580 [ 242.147526] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.153066] ? tcp_established_options+0x374/0x5c0 [ 242.157993] ? tcp_select_initial_window+0x3a0/0x3a0 [ 242.163123] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 242.168153] ? tcp_current_mss+0x2ac/0x410 [ 242.172406] ? tcp_mtu_to_mss+0x4e0/0x4e0 [ 242.176550] sk_stream_alloc_skb+0x141/0x970 [ 242.180957] ? tcp_init_transfer+0x470/0x470 [ 242.185358] ? tcp_rate_check_app_limited+0x121/0x470 [ 242.190542] ? tcp_fastopen_reset_cipher.cold.14+0x47/0x47 [ 242.196172] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 242.201198] tcp_sendmsg_locked+0xeaa/0x3f00 [ 242.205624] ? lock_downgrade+0x8f0/0x8f0 [ 242.209797] ? tcp_sendpage+0x60/0x60 [ 242.213594] ? rcu_is_watching+0x8c/0x150 [ 242.217733] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 242.222162] ? print_usage_bug+0xc0/0xc0 [ 242.226222] ? find_held_lock+0x36/0x1c0 [ 242.230279] ? lock_acquire+0x1e4/0x540 [ 242.234252] ? tcp_sendmsg+0x21/0x50 [ 242.237969] ? mark_held_locks+0xc9/0x160 [ 242.242124] ? __local_bh_enable_ip+0x161/0x230 [ 242.246792] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 242.251806] ? lock_sock_nested+0x9f/0x120 [ 242.256041] ? trace_hardirqs_on+0xd/0x10 [ 242.260186] ? __local_bh_enable_ip+0x161/0x230 [ 242.264850] tcp_sendmsg+0x2f/0x50 [ 242.268387] inet_sendmsg+0x1a1/0x690 [ 242.272181] ? ipip_gro_receive+0x100/0x100 [ 242.276496] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 242.282034] ? security_socket_sendmsg+0x94/0xc0 [ 242.286791] ? ipip_gro_receive+0x100/0x100 [ 242.291114] sock_sendmsg+0xd5/0x120 [ 242.294821] __sys_sendto+0x3d7/0x670 [ 242.298618] ? __ia32_sys_getpeername+0xb0/0xb0 [ 242.303279] ? wait_for_completion+0x8d0/0x8d0 [ 242.307857] ? __lock_is_held+0xb5/0x140 [ 242.311931] ? __sb_end_write+0xac/0xe0 [ 242.315909] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 242.321449] ? fput+0x130/0x1a0 [ 242.324733] ? ksys_write+0x1ae/0x260 [ 242.328532] ? __ia32_sys_read+0xb0/0xb0 [ 242.332597] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 242.338128] __x64_sys_sendto+0xe1/0x1a0 [ 242.342187] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 242.347210] do_syscall_64+0x1b9/0x820 [ 242.351107] ? syscall_return_slowpath+0x5e0/0x5e0 [ 242.356048] ? syscall_return_slowpath+0x31d/0x5e0 [ 242.360986] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 242.366349] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 242.371194] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 242.376394] RIP: 0033:0x455e29 [ 242.379567] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 242.398765] RSP: 002b:00007fac886e2c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 242.406481] RAX: ffffffffffffffda RBX: 00007fac886e36d4 RCX: 0000000000455e29 [ 242.413756] RDX: 00000000000053ab RSI: 00000000200003c0 RDI: 0000000000000014 [ 242.421034] RBP: 000000000072bea0 R08: 00000000200001c0 R09: 0000000000000010 [ 242.428299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 242.435556] R13: 00000000004c14f2 R14: 00000000004d1a08 R15: 0000000000000000 16:39:01 executing program 4 (fault-call:7 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 242.694846] binder: 14967:14982 IncRefs 0 refcount change on invalid ref 24576 ret -22 [ 242.703445] binder: 14967:14982 BC_ACQUIRE_DONE node 879 has no pending acquire request [ 242.716208] binder: BINDER_SET_CONTEXT_MGR already set [ 242.723254] binder: 14967:14982 ioctl 40046207 0 returned -16 [ 242.732196] binder: 14967:14987 IncRefs 0 refcount change on invalid ref 24576 ret -22 [ 242.732218] binder: BINDER_SET_CONTEXT_MGR already set [ 242.732233] binder: 14967:14982 ioctl 40046207 0 returned -16 [ 242.740441] binder: 14967:14987 BC_ACQUIRE_DONE u0000000000000000 no match [ 242.862343] FAULT_INJECTION: forcing a failure. [ 242.862343] name failslab, interval 1, probability 0, space 0, times 0 [ 242.873812] CPU: 0 PID: 14992 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #139 [ 242.881189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 242.890559] Call Trace: [ 242.893174] dump_stack+0x1c9/0x2b4 [ 242.896833] ? dump_stack_print_info.cold.2+0x52/0x52 [ 242.902045] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 242.906910] ? kernel_text_address+0x79/0xf0 [ 242.911347] should_fail.cold.4+0xa/0x1a [ 242.915427] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 242.920530] ? graph_lock+0x170/0x170 [ 242.924332] ? save_stack+0x43/0xd0 [ 242.927957] ? find_held_lock+0x36/0x1c0 [ 242.932112] ? __lock_is_held+0xb5/0x140 [ 242.936198] ? check_same_owner+0x340/0x340 [ 242.940514] ? rcu_note_context_switch+0x730/0x730 [ 242.945434] __should_failslab+0x124/0x180 [ 242.949840] should_failslab+0x9/0x14 [ 242.953647] kmem_cache_alloc_node_trace+0x26f/0x770 [ 242.958756] __kmalloc_node_track_caller+0x33/0x70 [ 242.963680] __kmalloc_reserve.isra.40+0x3a/0xe0 [ 242.968441] __alloc_skb+0x155/0x790 [ 242.972144] ? skb_scrub_packet+0x580/0x580 [ 242.976457] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 242.981985] ? tcp_established_options+0x374/0x5c0 [ 242.986904] ? tcp_select_initial_window+0x3a0/0x3a0 [ 242.992003] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 242.997017] ? tcp_current_mss+0x2ac/0x410 [ 243.001244] ? tcp_mtu_to_mss+0x4e0/0x4e0 [ 243.005402] sk_stream_alloc_skb+0x141/0x970 [ 243.009807] ? tcp_init_transfer+0x470/0x470 [ 243.014211] ? tcp_rate_check_app_limited+0x121/0x470 [ 243.019406] ? tcp_fastopen_reset_cipher.cold.14+0x47/0x47 [ 243.025036] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 243.030048] tcp_sendmsg_locked+0xeaa/0x3f00 [ 243.034451] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 243.039292] ? tcp_sendpage+0x60/0x60 [ 243.043079] ? rcu_is_watching+0x8c/0x150 [ 243.047222] ? perf_trace_lock+0x920/0x920 [ 243.051542] ? print_usage_bug+0xc0/0xc0 [ 243.055593] ? find_held_lock+0x36/0x1c0 [ 243.059655] ? lock_acquire+0x1e4/0x540 [ 243.063624] ? tcp_sendmsg+0x21/0x50 [ 243.067351] ? mark_held_locks+0xc9/0x160 [ 243.071490] ? __local_bh_enable_ip+0x161/0x230 [ 243.076151] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 243.081156] ? lock_sock_nested+0x9f/0x120 [ 243.085384] ? trace_hardirqs_on+0xd/0x10 [ 243.089525] ? __local_bh_enable_ip+0x161/0x230 [ 243.094202] tcp_sendmsg+0x2f/0x50 [ 243.097732] inet_sendmsg+0x1a1/0x690 [ 243.101528] ? ipip_gro_receive+0x100/0x100 [ 243.105853] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 243.111380] ? security_socket_sendmsg+0x94/0xc0 [ 243.116128] ? ipip_gro_receive+0x100/0x100 [ 243.120443] sock_sendmsg+0xd5/0x120 [ 243.124149] __sys_sendto+0x3d7/0x670 [ 243.127940] ? __ia32_sys_getpeername+0xb0/0xb0 [ 243.132600] ? wait_for_completion+0x8d0/0x8d0 [ 243.137175] ? __lock_is_held+0xb5/0x140 [ 243.141238] ? __sb_end_write+0xac/0xe0 [ 243.145290] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 243.150813] ? fput+0x130/0x1a0 [ 243.154084] ? ksys_write+0x1ae/0x260 [ 243.157894] ? __ia32_sys_read+0xb0/0xb0 [ 243.161969] __x64_sys_sendto+0xe1/0x1a0 [ 243.166028] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 243.171041] do_syscall_64+0x1b9/0x820 [ 243.175268] ? syscall_slow_exit_work+0x500/0x500 [ 243.180100] ? syscall_return_slowpath+0x5e0/0x5e0 [ 243.185022] ? syscall_return_slowpath+0x31d/0x5e0 [ 243.189948] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 243.195305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 243.200237] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.205416] RIP: 0033:0x455e29 [ 243.208600] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 243.227876] RSP: 002b:00007fac886e2c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 243.235585] RAX: ffffffffffffffda RBX: 00007fac886e36d4 RCX: 0000000000455e29 [ 243.242937] RDX: 00000000000053ab RSI: 00000000200003c0 RDI: 0000000000000014 [ 243.250193] RBP: 000000000072bea0 R08: 00000000200001c0 R09: 0000000000000010 16:39:02 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:02 executing program 3: r0 = getpgid(0x0) syz_open_procfs(r0, &(0x7f0000000080)='net/softnet_stat\x00') r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="0f01c826650f0966b831010f00d8440f20c03509000000440f22c0260f30b805000000b90b0000000f01c10f22240f22c3b9230800000f3266baf80cb8f09c3c8aef66bafc0cb83d000000ef", 0x4c}], 0x38d, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000280)=ANY=[@ANYPTR, @ANYRES32=r3, @ANYPTR=&(0x7f00000001c0)=ANY=[], @ANYBLOB="769496414d2bc77924c6e61df19774c2607561a161cd8bfcf5b5d9e429302175a72c88f766bf054d07297da41a02430b26f6f49381640d24e38fac95fcdd886c1373b8987e07ce7ed5ff0c6ed39efa68159ac253ceaabab12fd853c530b68c87d08aff342558fbe6ee59fc19cd9c1464dd7555abf612ca5455141754255659584df907b2629c295a04e87534cb05b6567603c966f83078f88408067629bdec9fccd3d462fe3a8ecc27196b7fe934299ac09a73c0eeb142", @ANYBLOB="86e52d30b9efba3131802def65c1afe4b91fe0ab3cda443cd8dceb6d18b9e2c956871162e26f30a948cda467c7040ec7042c8e6f028d0c70fbfc1d2bda361ef14b92a5ff0afee4795f8f817b6c52c79c2010898a5c7dd84295156e7948628cafd128f790d6568d468e457658bf984e569408f2802e86574edbbd38a7830453f294", @ANYRESDEC=r3, @ANYPTR64, @ANYRES16=0x0, @ANYPTR, @ANYRESDEC=r3]) 16:39:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) epoll_create(0x32) 16:39:02 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000180)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4b050000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 243.257449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 243.264712] R13: 00000000004c14f2 R14: 00000000004d1a08 R15: 0000000000000001 16:39:02 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:02 executing program 4 (fault-call:7 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:02 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000dfdfee)='/dev/input/event#\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x4, 0x20000) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f0000000000)=""/3) 16:39:02 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) rmdir(&(0x7f0000000180)='./file0\x00') lstat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') mount(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='msdos\x00', 0x21, &(0x7f0000000380)="927e7826c4dc369b18d6f074c0fab82bb9557258b2a65691cae9c0fb1b516701af12586f8086d5810db8b0212aa4596426f17ac2ad8164a0633b0c92bfc386da25aaa57b0051f4c8db8c5bb9dec0687fa1bf617571dd78b1f772edfe147a05c354488b30ef40ca69") memfd_create(&(0x7f00000004c0)='msdos\x00', 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 243.479309] binder: 15003:15010 IncRefs 0 refcount change on invalid ref 1258618880 ret -22 [ 243.488730] binder: 15003:15010 BC_ACQUIRE_DONE node 883 has no pending acquire request [ 243.499833] binder: BINDER_SET_CONTEXT_MGR already set [ 243.505514] binder: 15003:15010 ioctl 40046207 0 returned -16 16:39:02 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0xfffffdfd}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 243.523815] binder: 15003:15011 IncRefs 0 refcount change on invalid ref 1258618880 ret -22 [ 243.524128] binder: BINDER_SET_CONTEXT_MGR already set [ 243.532508] binder: 15003:15011 BC_ACQUIRE_DONE u0000000000000000 no match [ 243.547942] binder: 15003:15010 ioctl 40046207 0 returned -16 [ 243.697550] FAULT_INJECTION: forcing a failure. [ 243.697550] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 243.709547] CPU: 1 PID: 15029 Comm: syz-executor4 Not tainted 4.18.0-rc4+ #139 [ 243.716923] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 243.726557] Call Trace: [ 243.729176] dump_stack+0x1c9/0x2b4 [ 243.732827] ? dump_stack_print_info.cold.2+0x52/0x52 [ 243.738047] ? is_bpf_text_address+0xd7/0x170 [ 243.742585] should_fail.cold.4+0xa/0x1a [ 243.746813] ? __save_stack_trace+0x8d/0xf0 [ 243.751170] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 243.756317] ? save_stack+0xa9/0xd0 [ 243.759968] ? save_stack+0x43/0xd0 [ 243.763596] ? kasan_kmalloc+0xc4/0xe0 [ 243.767479] ? __kmalloc_node_track_caller+0x47/0x70 [ 243.772574] ? __kmalloc_reserve.isra.40+0x3a/0xe0 [ 243.777492] ? __alloc_skb+0x155/0x790 [ 243.781805] ? sk_stream_alloc_skb+0x141/0x970 [ 243.786466] ? tcp_sendmsg_locked+0xeaa/0x3f00 [ 243.791041] ? tcp_sendmsg+0x2f/0x50 [ 243.794803] ? inet_sendmsg+0x1a1/0x690 [ 243.798780] ? sock_sendmsg+0xd5/0x120 [ 243.802686] ? __sys_sendto+0x3d7/0x670 [ 243.806650] ? __x64_sys_sendto+0xe1/0x1a0 [ 243.810890] ? do_syscall_64+0x1b9/0x820 [ 243.814962] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 243.820326] ? __lock_is_held+0xb5/0x140 [ 243.824400] ? __lock_is_held+0xb5/0x140 [ 243.828480] __alloc_pages_nodemask+0x36e/0xdb0 [ 243.833145] ? kmem_cache_alloc_node_trace+0x34e/0x770 [ 243.838436] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 243.843459] ? __kmalloc_node_track_caller+0x47/0x70 [ 243.848567] ? kasan_check_write+0x14/0x20 [ 243.852797] ? __alloc_skb+0x4f2/0x790 [ 243.856685] ? skb_scrub_packet+0x580/0x580 [ 243.861006] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.866563] ? tcp_established_options+0x374/0x5c0 [ 243.871512] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 243.877055] alloc_pages_current+0x10c/0x210 [ 243.881459] skb_page_frag_refill+0x45f/0x6a0 [ 243.885947] ? sock_kzfree_s+0x60/0x60 [ 243.889846] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 243.894865] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 243.899873] ? tcp_chrono_start+0x190/0x1e0 [ 243.904192] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 243.909728] ? skb_entail+0x60f/0x8c0 [ 243.913536] ? tcp_rate_check_app_limited+0x121/0x470 [ 243.918723] ? tcp_splice_data_recv+0x1b0/0x1b0 [ 243.923390] sk_page_frag_refill+0x55/0x1f0 [ 243.927737] tcp_sendmsg_locked+0x11f3/0x3f00 [ 243.932241] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 243.937092] ? tcp_sendpage+0x60/0x60 [ 243.940895] ? rcu_is_watching+0x8c/0x150 [ 243.945049] ? perf_trace_lock+0x920/0x920 [ 243.949280] ? print_usage_bug+0xc0/0xc0 [ 243.953333] ? find_held_lock+0x36/0x1c0 [ 243.957396] ? lock_acquire+0x1e4/0x540 [ 243.961363] ? tcp_sendmsg+0x21/0x50 [ 243.965075] ? mark_held_locks+0xc9/0x160 [ 243.969222] ? __local_bh_enable_ip+0x161/0x230 [ 243.973886] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 243.978894] ? lock_sock_nested+0x9f/0x120 [ 243.983126] ? trace_hardirqs_on+0xd/0x10 [ 243.987279] ? __local_bh_enable_ip+0x161/0x230 [ 243.991970] tcp_sendmsg+0x2f/0x50 [ 243.995515] inet_sendmsg+0x1a1/0x690 [ 243.999314] ? ipip_gro_receive+0x100/0x100 [ 244.003634] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 244.009170] ? security_socket_sendmsg+0x94/0xc0 [ 244.013916] ? ipip_gro_receive+0x100/0x100 [ 244.018242] sock_sendmsg+0xd5/0x120 [ 244.021956] __sys_sendto+0x3d7/0x670 [ 244.025754] ? __ia32_sys_getpeername+0xb0/0xb0 [ 244.030427] ? wait_for_completion+0x8d0/0x8d0 [ 244.035011] ? __lock_is_held+0xb5/0x140 [ 244.039090] ? __sb_end_write+0xac/0xe0 [ 244.043085] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 244.048623] ? fput+0x130/0x1a0 [ 244.051896] ? ksys_write+0x1ae/0x260 [ 244.055694] ? __ia32_sys_read+0xb0/0xb0 [ 244.059768] __x64_sys_sendto+0xe1/0x1a0 [ 244.063824] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 244.068838] do_syscall_64+0x1b9/0x820 [ 244.072714] ? syscall_slow_exit_work+0x500/0x500 [ 244.077550] ? syscall_return_slowpath+0x5e0/0x5e0 [ 244.082476] ? syscall_return_slowpath+0x31d/0x5e0 [ 244.087405] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 244.092775] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 244.097621] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 244.102814] RIP: 0033:0x455e29 [ 244.105997] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 244.125439] RSP: 002b:00007fac886e2c68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 244.133146] RAX: ffffffffffffffda RBX: 00007fac886e36d4 RCX: 0000000000455e29 [ 244.140518] RDX: 00000000000053ab RSI: 00000000200003c0 RDI: 0000000000000014 16:39:03 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)) 16:39:03 executing program 5: syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000140)="00080000ec0500006d8a2b001200000000010000b90200000001000284811f4ce10077a1907aaae6313400000010ec0302e57b00526549734572334673", 0x3d, 0x10001}], 0x0, &(0x7f0000000180)={[{@barrier_flush='barrier=flush', 0x2c}, {@data_writeback='data=writeback', 0x2c}, {@usrquota='usrquota', 0x2c}, {@acl='acl', 0x2c}]}) 16:39:03 executing program 6: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x400200, 0x0) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000440)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6}}, &(0x7f0000000540)=0xe8) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000680)={0x0, 0x0, 0x0}, &(0x7f00000006c0)=0x14) r4 = socket$inet6(0xa, 0x1000000000003, 0x7) ioctl(r4, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts-twofish-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) r6 = accept$alg(r5, 0x0, 0x0) sendmmsg$alg(r6, &(0x7f0000000080)=[{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000000c0)="b5cbb3f0784d033f40d43c07b3b9f630", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r6, &(0x7f0000001200)={&(0x7f0000000000)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f00000011c0)=[{&(0x7f0000001140)=""/78, 0xfffffe06}], 0x1}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000740)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000a00)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000b00)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000dc0)={{{@in6=@ipv4={[], [], @broadcast}, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@multicast2}}, &(0x7f0000000ec0)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000007fc0)={0x0, @broadcast, @dev}, &(0x7f00000002c0)=0xc) getpeername$packet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000008140)=0x14) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000008580)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000008540)={&(0x7f0000008180)={0x3ac, r1, 0x118, 0x70bd28, 0x25dfdbfd, {0x3}, [{{0x8, 0x1, r2}, {0x4, 0x2}}, {{0x8, 0x1, r3}, {0x170, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x3ff, 0xfffffffffffffffa, 0x35, 0xb4}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4, 0xff}}, {0x8, 0x7}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r9}, {0xf0, 0x2, [{0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0xc, 0x4, [{0x20, 0x1, 0x101, 0x7fffffff}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8, 0x3, 0xb}, {0x8, 0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}]}}, {{0x8, 0x1, r11}, {0x114, 0x2, [{0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x14, 0x4, [{0x1, 0x0, 0x7, 0x4}, {0x1, 0x535, 0x9, 0x7fff}]}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x401}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x52}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x2c, 0x4, [{0xf, 0x1f, 0x7, 0x2}, {0x7, 0x8, 0x8001, 0xb411}, {0x7, 0x8, 0x5, 0x6}, {0xffffffffffffffff, 0x3, 0x6, 0x401}, {0xff, 0xfffffffffffffffc, 0x100, 0x38c0}]}}}]}}]}, 0x3ac}, 0x1, 0x0, 0x0, 0xc000}, 0x10) getsockopt$sock_buf(r5, 0x1, 0x3f, &(0x7f0000000240)=""/67, &(0x7f00000001c0)=0x43) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000000)={&(0x7f0000000180)={0x10}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000002c00040000005413948bdc9deb394d0000000000000000000000000000"], 0x18}, 0x1}, 0x0) [ 244.147780] RBP: 000000000072bea0 R08: 00000000200001c0 R09: 0000000000000010 [ 244.155043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 244.162394] R13: 00000000004c14f2 R14: 00000000004d1a08 R15: 0000000000000002 16:39:03 executing program 4 (fault-call:7 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:03 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000140)="025cc83d6d345f8f762070") close(r0) syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000080)='./file0\x00', 0x400000000000000, 0xaaaaaaaaaaaaade, &(0x7f0000000540), 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="636865636b3d739f7d9154742c00"]) 16:39:03 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x80000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f00000003c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="4df266835cdd0e0bf73c59cfa0f6b64fc9eb"], &(0x7f0000000300)=0xe) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000340)=@assoc_id=r1, &(0x7f0000000380)=0x4) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) pause() [ 244.309421] binder: 15032:15041 IncRefs 0 refcount change on invalid ref -515 ret -22 [ 244.317540] binder: 15032:15041 BC_ACQUIRE_DONE node 887 has no pending acquire request [ 244.337000] binder: BINDER_SET_CONTEXT_MGR already set [ 244.343988] binder: 15032:15041 ioctl 40046207 0 returned -16 [ 244.346640] binder: BINDER_SET_CONTEXT_MGR already set [ 244.355327] binder: 15032:15042 ioctl 40046207 0 returned -16 [ 244.355808] binder: 15032:15043 IncRefs 0 refcount change on invalid ref -515 ret -22 [ 244.369525] binder: 15032:15043 BC_ACQUIRE_DONE u0000000000000000 no match [ 244.536106] REISERFS warning (device loop5): super-6502 reiserfs_getopt: unknown mount option "" 16:39:04 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4c}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)) 16:39:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text32={0x20, &(0x7f0000000080)="f20f080f01cf0f233a66baf80cb86402868cef66bafc0c66ed67660ff6b9360036663e0f35b9c60d00000f322e2ef30fbeb541240000f30f211366baf80cb81f926b83ef66bafc0cb000ee", 0x4b}], 0x1, 0x0, &(0x7f0000000040), 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f00000001c0)="025cc83d6d345f8f762070") ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000000)=ANY=[@ANYBLOB="e200000000080000f8ffa5"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x20, "d3b3b2f0b34671d12bda83103ededa3a9327877658fe1a4f2c5fef546a6c8f58"}, &(0x7f0000000100)=0x28) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000000140)={0x1, 0x2, 0x4, 0x3, 0x7fff, 0x4, 0x0, 0xcede, r4}, &(0x7f0000000180)=0x20) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:39:04 executing program 6: r0 = socket$inet6(0xa, 0x80000, 0x8000000000) ioctl(r0, 0x4000000008912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x505200) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast1}, &(0x7f0000000440)=0xc) connect$can_bcm(r2, &(0x7f0000000480)={0x1d, r3}, 0x10) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000000c0)="c4824da82b66ba2100b801000000efb9270900000f323640a7650f30c4e2899c8e02000000f02046452ef3440f6fb800f0ff7fc42101dbc40f2047"}], 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000001e00fb034d564b0000000001"]) ioctl$KVM_ENABLE_CAP_CPU(r5, 0x4004ae99, &(0x7f00000001c0)={0x4}) 16:39:04 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x2000400) r1 = getpid() prctl$setptracer(0x59616d61, r1) getpriority(0x0, r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) connect$inet6(r2, &(0x7f0000000000)={0xa}, 0x0) 16:39:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)) [ 244.724710] binder: 15080:15083 IncRefs 0 refcount change on invalid ref 76 ret -22 [ 244.732985] binder: 15080:15083 BC_ACQUIRE_DONE node 891 has no pending acquire request [ 244.743885] binder: BINDER_SET_CONTEXT_MGR already set [ 244.749582] binder: 15080:15083 ioctl 40046207 0 returned -16 [ 244.763664] binder: 15080:15085 IncRefs 0 refcount change on invalid ref 76 ret -22 [ 244.764791] binder: BINDER_SET_CONTEXT_MGR already set [ 244.771753] binder: 15080:15085 BC_ACQUIRE_DONE u0000000000000000 no match [ 244.777265] binder: 15080:15083 ioctl 40046207 0 returned -16 16:39:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0xffffff7f00000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:04 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @broadcast}}}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000d40)=""/4096, 0xffd2}], 0x1000000000000107, &(0x7f0000000080)=""/92, 0xfffffffffffffe56}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000100)=0x1, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000280)='/dev/dmmidi#\x00', 0x34, 0x0) ioctl$int_out(r1, 0xc0305710, &(0x7f0000000100)) getpeername$unix(r1, &(0x7f0000000180)=@abs, &(0x7f0000000200)=0x6e) getsockopt(r0, 0x2, 0x6, &(0x7f00000002c0)=""/187, &(0x7f0000000240)=0xbb) 16:39:04 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x2000576b, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:04 executing program 3: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$fiemap(r0, 0x40086602, &(0x7f0000000080)=ANY=[]) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) ftruncate(r1, 0x28200) r2 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) sendfile(r1, r2, &(0x7f0000d83ff8)=0x8600, 0x8000fffffffe) [ 244.994850] binder: 15110:15117 tried to acquire reference to desc 0, got 1 instead [ 245.002943] binder: 15110:15117 BC_ACQUIRE_DONE node 895 has no pending acquire request [ 245.018170] binder: BINDER_SET_CONTEXT_MGR already set [ 245.023909] binder: 15110:15117 ioctl 40046207 0 returned -16 [ 245.032853] binder: BINDER_SET_CONTEXT_MGR already set 16:39:04 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x101000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x36f, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x8d4, 0x10}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0x9, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x48, 0x1, 0x8}], {0x95}}, &(0x7f0000000000)='GPL\x00', 0x0, 0xfb, &(0x7f00001a7f05)=""/251}, 0x14) ioctl$VHOST_SET_VRING_NUM(r1, 0x4008af10, &(0x7f0000000080)={0x0, 0x7}) 16:39:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x400000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 245.038381] binder: 15110:15118 BC_ACQUIRE_DONE u0000000000000000 no match [ 245.046427] binder: 15110:15117 ioctl 40046207 0 returned -16 [ 245.272577] binder: 15135:15138 tried to acquire reference to desc 0, got 1 instead [ 245.280600] binder: 15135:15138 BC_ACQUIRE_DONE node 900 has no pending acquire request [ 245.297327] binder: BINDER_SET_CONTEXT_MGR already set [ 245.304801] binder: 15135:15138 ioctl 40046207 0 returned -16 [ 245.313244] binder: 15135:15139 BC_ACQUIRE_DONE u0000000000000000 no match [ 245.330010] binder: BINDER_SET_CONTEXT_MGR already set [ 245.338372] binder: 15135:15138 ioctl 40046207 0 returned -16 16:39:04 executing program 1: r0 = syz_open_dev$usbmon(&(0x7f0000000380)='/dev/usbmon#\x00', 0xc80, 0x40000) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f00000003c0)='NETMAP\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000002c0)) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$sock_SIOCOUTQ(r2, 0x5411, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:04 executing program 5: syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0xe800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r0 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x0, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x2, 0x2ec, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r2, 0xc0045516, &(0x7f0000000140)=0x8001) read(r2, &(0x7f0000000000)=""/143, 0xfffffe5e) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r5 = dup3(r3, r2, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x1c9c380}}, &(0x7f00000002c0)) ioctl$TIOCNXCL(r5, 0x540d) tkill(r1, 0x1004000000016) mknodat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0) renameat2(r0, &(0x7f0000000480)="2e2f636f6e74726f6cff0500", r0, &(0x7f00000004c0)='./file0\x00', 0x0) 16:39:04 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:04 executing program 6: r0 = socket$inet6(0xa, 0x81005, 0x800000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}}, 0x14) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000200)={@dev={0xfe, 0x80}}, 0x14) r2 = socket(0xa, 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000280), 0xf401, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @loopback={0x0, 0x8}}, 0x1c) 16:39:04 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RSETATTR(0xffffffffffffff9c, &(0x7f0000000040)={0x7, 0x1b, 0x1}, 0xa5) sendmsg$nl_route(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@ipv6_newaddr={0x40, 0x14, 0x835, 0x0, 0x0, {0xa}, [@IFA_ADDRESS={0x14, 0x1}, @IFA_LOCAL={0x14, 0x2}]}, 0x40}, 0x1}, 0x0) 16:39:04 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x1000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:04 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) [ 245.580904] binder: 15152:15158 IncRefs 0 refcount change on invalid ref 16777216 ret -22 [ 245.589392] binder: 15152:15158 BC_ACQUIRE_DONE node 905 has no pending acquire request 16:39:05 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:05 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000500)={0x10}, 0xc, &(0x7f0000000540)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000180031d5ffe0000000000000140009000836b8b56826b400008d000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="08000400", @ANYRES32=0x0], 0x30}, 0x1}, 0x0) r1 = signalfd4(r0, &(0x7f0000000000)={0x1}, 0x8, 0x80800) munmap(&(0x7f0000fff000/0x1000)=nil, 0x1000) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x50000, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={0x0, 0x1ff}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000480)={r3, 0x9}, 0x8) syz_mount_image$iso9660(&(0x7f00000000c0)='iso9660\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x3, &(0x7f0000000300)=[{&(0x7f0000000140)="b2305edae53c37376966367d2d401fd6922742c0a66eacc97be1", 0x1a, 0x1}, {&(0x7f0000000180)="70514cab37f8babc9a8e187a50e31241d87421f3ae8fc37e038356fab0efde2d7d0938078b9393013043f7e0e49045ae42c9f4b153ae9e401ce375ef900e8ecbc6d2dd79d8615e7fd54169a261611632536100da4618e3fbc7dfba9a8f6fe61e03708730757812e1b5122b211414820550fb1bc40ce339cd15d6481b434a", 0x7e, 0x8}, {&(0x7f0000000200)="dcd47b6db477b1284b59fd7565e010e17255f31081bf0d8f72544bc00327308241cc04715bfcd15680ac50dfea0b075e635685edd32837d204e09ba0583f499341ec8b0c93b36861f502fa520f49dfa70656ddaa103d09a208db2c8fae4d6964530ac73ac916a6ac3043fc88191003d3e61ab6fe98832104b1422a60b7f69ed97d6d52c238388169675af9f4c297ce3b529a60af8f9fc5a01c516b516353b69dc3c0ad571f87b718361fabfcc1039a60266ed7a3de55233df807bfd0c7a86b7ae8e95f7abb20c916eea986af9f7985ce2c1fd22faa", 0xd5, 0x8001}], 0x4, &(0x7f0000000380)={[{@overriderock='overriderockperm', 0x2c}, {@map_normal='map=normal', 0x2c}]}) openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x2000, 0x0) 16:39:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10080}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_getrule={0x20, 0x22, 0x100, 0x70bd2d, 0x25dfdbfb, {0xa, 0x80, 0x80, 0x5, 0x0, 0x0, 0x0, 0x7, 0x8}, ["", "", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x4000000) sendmsg$nl_route(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000240)=@ipv4_newaddr={0x34, 0x14, 0x11d, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x8, 0x2, @dev={0xac, 0x14, 0x14}}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0x7}}]}, 0x34}, 0x1}, 0x0) 16:39:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x20000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 245.679075] binder: BINDER_SET_CONTEXT_MGR already set [ 245.687489] binder: BINDER_SET_CONTEXT_MGR already set [ 245.690473] binder: 15152:15158 ioctl 40046207 0 returned -16 [ 245.702567] binder: 15152:15174 IncRefs 0 refcount change on invalid ref 16777216 ret -22 [ 245.711132] binder: 15152:15174 BC_ACQUIRE_DONE u0000000000000000 no match [ 245.715376] binder: 15152:15173 ioctl 40046207 0 returned -16 [ 245.863018] isofs_fill_super: bread failed, dev=loop3, iso_blknum=32, block=64 [ 245.890912] binder: 15189:15194 IncRefs 0 refcount change on invalid ref 536870912 ret -22 [ 245.899634] binder: 15189:15194 BC_ACQUIRE_DONE node 909 has no pending acquire request [ 245.907675] isofs_fill_super: bread failed, dev=loop3, iso_blknum=32, block=64 [ 245.928457] binder: BINDER_SET_CONTEXT_MGR already set [ 245.944349] binder: 15189:15194 ioctl 40046207 0 returned -16 [ 245.952768] binder: 15189:15198 IncRefs 0 refcount change on invalid ref 536870912 ret -22 16:39:05 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x5580, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000180)=[{&(0x7f00000002c0)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0xffffffffffffffee}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0xffffdf6, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:05 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x801c581f, &(0x7f0000000000)) 16:39:05 executing program 6: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000100)) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f0000000000)) 16:39:05 executing program 3: fchdir(0xffffffffffffffff) r0 = socket$vsock_stream(0x28, 0x1, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) write$P9_RSTAT(r1, &(0x7f0000000040)={0x58, 0x7d, 0x1, {0x0, 0x51, 0x400, 0x1ff, {0x1, 0x3, 0x6}, 0x40000000, 0x41b1, 0x0, 0x80, 0x0, "", 0x0, "", 0x9, 'lo,cgroup', 0x15, 'vmnet0GPLeth0trusted\x00'}}, 0x58) dup3(0xffffffffffffffff, r0, 0x0) [ 245.954042] binder: BINDER_SET_CONTEXT_MGR already set [ 245.961499] binder: 15189:15198 BC_ACQUIRE_DONE u0000000000000000 no match [ 245.966753] binder: 15189:15194 ioctl 40046207 0 returned -16 16:39:05 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0xa000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 246.186715] binder: 15227:15231 IncRefs 0 refcount change on invalid ref 167772160 ret -22 [ 246.195452] binder: 15227:15231 BC_ACQUIRE_DONE node 913 has no pending acquire request [ 246.211627] binder: BINDER_SET_CONTEXT_MGR already set [ 246.217760] binder: 15227:15231 ioctl 40046207 0 returned -16 [ 246.229257] binder: 15227:15232 IncRefs 0 refcount change on invalid ref 167772160 ret -22 [ 246.233090] binder: BINDER_SET_CONTEXT_MGR already set [ 246.237803] binder: 15227:15232 BC_ACQUIRE_DONE u0000000000000000 no match [ 246.250897] binder: 15227:15231 ioctl 40046207 0 returned -16 16:39:05 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x5580, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:05 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x801c581f, &(0x7f0000000000)) 16:39:05 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) socketpair(0xf, 0x3, 0x3, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000140), &(0x7f0000000180)=0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x80000000006]}) ioctl$KVM_NMI(r3, 0xae9a) write$binfmt_aout(0xffffffffffffffff, &(0x7f0000001380)=ANY=[@ANYBLOB], 0xad) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:39:05 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000340)=0xc) perf_event_open(&(0x7f00000002c0)={0x5, 0x70, 0x8001, 0x3, 0x0, 0x9ac, 0x0, 0x253, 0x491881966291c2c4, 0x2, 0x7, 0xffffffff, 0x3c2, 0x1, 0x9, 0x8, 0x100000001, 0x81, 0x8, 0x6, 0x80, 0x5, 0xffff, 0x100000000, 0x5, 0x31cf, 0x8000, 0x7f, 0x7b, 0x1, 0x3, 0x1, 0x1000, 0x0, 0x8, 0x4, 0x7, 0x8, 0x0, 0x3, 0x0, @perf_config_ext, 0x20000, 0x44bd, 0xebc, 0x3, 0x9, 0x8, 0x100000001}, r2, 0xd, r1, 0x2) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f000000dfed)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000c000)={0x9, 0x0, 0x0, 0x0, "ddfbe36de3f9b5e3e004bcc0ae4de5d4e831c68b6c2956c2874476ee83e417454f684cab6a71b139644ea97a"}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x6, 0x101000) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000140)=""/72, 0x200000, 0x800, 0xfffffffffffffffc}, 0x18) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f000000f000)={0x9, 0x0, 0x0, 0x0, "2a5a7aa6e53ff258647a2c1a8eea9f6c6d94820ca1091fcd87f112b28bb336f2fc0f56e07866b5874c098814"}) ioctl$ASHMEM_GET_SIZE(r0, 0x7704, 0x0) keyctl$join(0x1, &(0x7f0000000000)={0x73, 0x79, 0x7a, 0x2}) r2 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x2b7f, 0x504fe) write$P9_RREMOVE(r2, &(0x7f0000000080)={0x7, 0x7b, 0x1}, 0x7) syncfs(r0) 16:39:06 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 16:39:06 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0xfffffdef, 0x0, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6800}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:06 executing program 7: socket$inet6(0xa, 0x1000000000002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x801c581f, &(0x7f0000000000)) 16:39:06 executing program 3: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x17, &(0x7f00000002c0), 0xffffffffffffff49) semop(0x0, &(0x7f0000000080), 0x0) 16:39:06 executing program 6: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f00000000c0), 0xffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[@ANYBLOB="1405000206010000000000000000005800000000231fab628221dd342cc777366da57d2ac4736460d5ddfbfe3e6c2793db5bf8b6a4f9ae68f6a2979bb0b3b21c60a5784cf81c3bc7589b7561e6eb316928a6d08fef4f25d8993afaffffff7c3852f0bef6ac350816ae705f07ab3baab8ee43b02e51b568ab198e43346d0000c2ceccf46e6a5a0ad46392e3b11f7f2b7c633f465afdb657984517672e"], 0x14}, 0x1}, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x210202, 0x0) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x70, 0xdcc, 0x0, 0x7, 0x10000, 0x0, 0x8, 0x20000, 0xb, 0x1, 0xffffffffffffc490, 0x7ff, 0x9, 0xd2, 0x8, 0x5, 0x200, 0x7, 0x100000000, 0x80000001, 0x4, 0x2, 0x9, 0x8000, 0x5, 0x4, 0x3e5, 0xff, 0x0, 0x9, 0xfffffffffffffffc, 0x3ff, 0x9, 0x1, 0x6aa, 0x3, 0x8000, 0x0, 0x4, 0x6, @perf_bp={&(0x7f0000000100), 0x1}, 0x2002, 0x89c, 0x8, 0x6, 0x2, 0xf8}, r2, 0xf, r0, 0x2) 16:39:06 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/qat_adf_ctl\x00', 0x100, 0x0) sendmsg$kcm(r0, &(0x7f0000000580)={&(0x7f0000000500)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca194926157583c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x1cb, 0x8000}, 0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f00000002c0)={'raw\x00'}, &(0x7f0000000340)=0x54) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000380)={0x0, 0x200, 0xa, [0x4, 0x1, 0x7, 0x1de, 0xffff, 0x2, 0x81, 0x80000, 0x2, 0x8]}, &(0x7f00000003c0)=0x1c) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000400)=@assoc_value={r3, 0xffffffffffffffff}, &(0x7f0000000440)=0x8) 16:39:06 executing program 5: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f00000000c0)={0x10000000000, 0xe75d, 0x5, 0x1, 0x7fff, 0x7f, 0x7, 0x2, 0x7ff, 0x80000001, 0x2}, 0xb) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha224-generic)\x00'}, 0x58) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000200)='/proc/self/net/pfkey\x00', 0x41, 0x0) accept$alg(r2, 0x0, 0x0) getsockopt$EBT_SO_GET_INFO(r0, 0x0, 0x80, &(0x7f0000000140)={'filter\x00'}, &(0x7f0000000040)=0x78) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000100)={0x10000}) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000282fef), 0x4000) [ 246.642795] binder: 15264:15271 IncRefs 0 refcount change on invalid ref 26624 ret -22 [ 246.651116] binder: 15264:15271 BC_ACQUIRE_DONE node 917 has no pending acquire request [ 246.662496] binder: BINDER_SET_CONTEXT_MGR already set [ 246.673609] binder: 15264:15271 ioctl 40046207 0 returned -16 16:39:06 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x801c581f, &(0x7f0000000000)) 16:39:06 executing program 6: r0 = syz_open_dev$evdev(&(0x7f0000000400)='/dev/input/event#\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), &(0x7f00000000c0)=0xc) ioctl$fiemap(r0, 0xc020660b, &(0x7f0000000440)=ANY=[@ANYBLOB="01800000000000000500000000000000020000000001000300000000000000000100000000000000ffffffffffffffff00000000000000b4e25415eb24c32600000000000000000002200000000000000000000000000000aede0000000000f70500000000000000010100000000000000000000000000000000000000000000000400000000000000000000000000000700000000000000000000000000000053000000000000000000000000000000000000000000000000090000000000000000000000000000"]) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r1) sendfile(r1, r2, &(0x7f00000ddff8)=0xa00, 0x102002f01) [ 246.705219] binder: 15264:15275 IncRefs 0 refcount change on invalid ref 26624 ret -22 [ 246.713483] binder: 15264:15275 BC_ACQUIRE_DONE u0000000000000000 no match [ 246.743799] binder: BINDER_SET_CONTEXT_MGR already set 16:39:06 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x16dcc}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:06 executing program 3: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = dup(0xffffffffffffff9c) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000000100)="71912abca04081fcfbcdcca9215c31b0eef7a8208cd58a6144f763a59f6b43baf55ce99a8ebcd5cd9a5662b438df34f91f66db96a9cc635dccaad46daf7d10d934e5d17d03cdeee94df34feb85f7115e8bb854da540ed0e23f47d2", 0x5b) ioctl$GIO_FONT(r1, 0x4b60, &(0x7f0000000080)=""/89) mq_notify(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0xfffffffffffffffc, 0x0, @thr={&(0x7f0000ce5fda), &(0x7f0000c51000)}}) [ 246.755157] binder: 15264:15271 ioctl 40046207 0 returned -16 16:39:06 executing program 5: mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0xffffffffffffffff) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x8, 0x4) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(&(0x7f0000000140)='./file1\x00', 0x0) rename(&(0x7f0000000000)='./file1\x00', &(0x7f0000000340)='./file0\x00') 16:39:06 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$IOC_PR_RESERVE(r4, 0x401070c9, &(0x7f00000002c0)={0x9, 0x1, 0x1}) getsockopt$IP_VS_SO_GET_INFO(r3, 0x0, 0x481, &(0x7f0000000380), &(0x7f00000003c0)=0xc) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000340)=0x200, 0x4) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000300)={r2, 0x0, 0x8, 0x0, 0x5}) 16:39:06 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x801c581f, &(0x7f0000000000)) 16:39:06 executing program 6: r0 = socket(0x10, 0x807, 0x0) r1 = dup2(r0, r0) ioctl$TUNGETVNETHDRSZ(r1, 0x800454d7, &(0x7f00000000c0)) socket$inet6(0xa, 0x1000000000002, 0x0) io_setup(0x1ff, &(0x7f0000000100)=0x0) io_submit(r2, 0x2, &(0x7f0000000240)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x6, 0x5, r1, &(0x7f0000000140)="668c5ca9fdd4de5f7cf66f07b2130638ce2d007135ccaa8132ae968338154144599b6fdcc61aeaeb120f18ccced596bd4a41755c07bb6a769a87cac7df0bc572a72205d6395d23aeed1ee13884b8a8a25623b0d171d23d533bf7284b15cce15e3d638166f05734aadcb7b286dafe1d55ef92bf337165b9f679d0683e72162cfd", 0x80, 0x400, 0x0, 0x0, r1}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0xffffffff, r1, &(0x7f00000002c0)="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", 0x1000, 0x98, 0x0, 0x1, r1}]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_sock_size\x00', 0x2, 0x0) mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x63050, r3, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x11, &(0x7f0000000040), 0xfffffffffffffffd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) [ 246.927663] binder: BINDER_SET_CONTEXT_MGR already set [ 246.949634] binder: 15306:15309 ioctl 40046207 0 returned -16 [ 246.963829] binder: 15306:15309 IncRefs 0 refcount change on invalid ref 93644 ret -22 [ 246.972147] binder: 15306:15309 BC_ACQUIRE_DONE u0000000000000000 no match [ 246.984158] binder: 15306:15315 IncRefs 0 refcount change on invalid ref 93644 ret -22 [ 246.992386] binder: 15306:15315 BC_ACQUIRE_DONE node 923 has no pending acquire request 16:39:07 executing program 7: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r0, 0x801c581f, &(0x7f0000000000)) 16:39:07 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 16:39:07 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00001ec000)="0a07e1c48761a0000000ed5c54dbb600", 0x2) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f000022efc8)={&(0x7f0000bb5ff0)=@ethernet={0x0, @random}, 0x80, &(0x7f00000000c0), 0x1, &(0x7f0000139000)=""/70, 0x46, 0x40000000000}, 0xfffffffffffffffe) 16:39:07 executing program 5: openat$cuse(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/cuse\x00', 0x80, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000300)='/dev/dsp#\x00', 0x2450c000000000, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000080)={0x1, 0xffffffffffffff9c}) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000100)=0x0) fcntl$setown(r1, 0x8, r2) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)=0x0) r4 = accept$inet6(0xffffffffffffff9c, 0x0, &(0x7f0000000140)) r5 = accept$inet6(r4, &(0x7f0000000180)={0x0, 0x0, 0x0, @mcast1}, &(0x7f00000001c0)=0x1c) r6 = inotify_init1(0x0) fcntl$setown(r5, 0x8, r3) chdir(&(0x7f0000000200)='./file0\x00') fcntl$getownex(r6, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$setopts(0x4206, r7, 0x0, 0x0) ptrace(0x4207, r7) rt_sigqueueinfo(r7, 0x12, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffff9}) ptrace(0xffffffffffffffff, r7) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r5, 0x29, 0xd3, &(0x7f0000000240)={{0xa, 0x4e24, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x94ad}, {0xa, 0x4e22, 0x8ce, @loopback={0x0, 0x1}, 0x7}, 0x7, [0x7f, 0x5, 0x9, 0x7, 0x3f, 0x9, 0x5, 0x22c98caf]}, 0x5c) 16:39:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) futex(&(0x7f0000000000)=0x3, 0x400000089, 0x0, &(0x7f0000000080)={0x0, 0x989680}, &(0x7f0000000100)=0x20000000000000, 0x0) 16:39:07 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0xfffffe73, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) pwritev(r0, &(0x7f0000000880)=[{&(0x7f0000000340)="694f38e5bfd80c6fda7d5a71eb3ae26538271a57f0d11b3837ffeeef6ef41dc207f8a4fbd903ac26befe9699308026b89adc205c52d2cc2ae3c632870b245c38b7d5e9c55daa070a19757aa0707bde5b0477e22051a2196ce8789e0bff1704f99543327e05c1e0a688dc0200f97db3a40b661302ffd932df62324b4359d2917762ccf30abc60a56d3fe33861d8", 0x8d}, {&(0x7f0000000400)="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", 0xff}, {&(0x7f0000000500)="ca7d80787625bc400700a43de9bdcca16392903baffe7b48dd49e9742dc9da58c6f1d5048db21a48e4fc7c654ccf9bdad00b21db689f1998fba2500329ad3a2581c8c6433779", 0x46}, {&(0x7f00000005c0)="849ddc267f68c46882c631bfb7cf7c7e337e3886cb7db818174ee4d7cabb220404109bc729e5fb60a07ece", 0x2b}, {&(0x7f0000000600)="797d28a54667377efcfaffbf3a390ecbcd125bfbd6a914945eab869d39f5ea5936bf27be5845002d535b0ef7b3cb0069f9e4ca47107bad08363a42e0925a98b5d5852a343072ec6b8413d05d18794fb9e11fb31ba1609cdd43865931c6d692d12e6e1d0d065db59c25da73e81cdf7d161bd6a53b576742f95c381f8dc8aefbe5c8b12e70144dd59a900114ed2726f1848f40b36d8105fd88d9eb7a1cb443dd237d30d6b682a015b9c719d11845b3e2ddc96a63c17b54e98c31c26f9cf86fdac56e58a324e6fd75e3ff74a640", 0xcc}, {&(0x7f0000000700)="21b49b7f7bca46e6a9d5bb249cf1", 0xe}, {&(0x7f0000000780)="82a4dce6200ebcfeb4807e83abc7a37362cd441206df51b01d1b635c70366b18812214448fd0dd84cbdc8e46c5ca788ea9d1da818d6bd2d9842a54692eb00cb1528d54ba48d844f2474fa4470a05c75cb6bed408e410d99a9f86b05a90b9112377845a78315aaf85931de0ebb5add0733b3bcc17ab11cadcd9c5c4f75bf8805efbdda7a850f180e51ec6026c0b13f138f9dd5daaa655cf826fe53ca011a6dc808e560e221d74bb901aea6edf0ada6e4d283478910cbaa0f030922e199f4c99fbe93818c2366347e177f678bb796befad65dc66", 0xd3}], 0x7, 0x0) socketpair(0x10, 0x40080c, 0x100000000, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x19, 0x1, 0x7, &(0x7f0000000740)) ioctl$FIBMAP(r1, 0x1, &(0x7f0000000300)=0x3f) open(&(0x7f0000000900)='./file0\x00', 0x0, 0x102) setsockopt$inet_sctp6_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000180)={0xfffffffffffffff7, 0x2f, 0x3, 0xd23}, 0x8) 16:39:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x240, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_sctp(0x2, 0x800000000001, 0x84) connect$inet(r1, &(0x7f0000f6fff0)={0x2, 0x4e23, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) listen(r0, 0x400004f24aea) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x8, 0x1}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f00000002c0)={r2, @in={{0x2, 0x4e23, @multicast1=0xe0000001}}, [0x401, 0x100, 0x8000, 0xff, 0x20, 0x5, 0x6432bf14, 0x9, 0x100, 0x2, 0x3f, 0x80000000, 0x4, 0x3, 0x2]}, &(0x7f00000001c0)=0x100) r3 = accept(r1, &(0x7f0000000040)=@hci, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="10001e00ef85967a51957d31a13d67b9533b1f0c"], &(0x7f0000000180)=0x18) 16:39:07 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:07 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000240)='ns\x00') fchdir(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xa, 0x19, 0x6, 0x4, 0x0, 0xffffffffffffff9c}, 0x2c) r2 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup2(r1, r2) syz_fuseblk_mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 247.717734] binder: 15346:15354 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 247.725761] binder: 15346:15354 BC_ACQUIRE_DONE node 926 has no pending acquire request 16:39:07 executing program 3: r0 = inotify_init() r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x6, 0x1) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000100)={'irlan0\x00', {0x2, 0x4e20, @rand_addr=0x9}}) fcntl$setstatus(r0, 0x4, 0x800) creat(&(0x7f0000000140)='./file0\x00', 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000280)={'veth1_to_team\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="3700000000000000faffffffffa6a3ffb00f9d64ce9b270ef36afd1e60d76b4a075ea9d7422649a3add5657e10932dcf7a9fc9c74f8f6b87ab819038"]}) inotify_add_watch(r0, &(0x7f0000000200)='./file0\x00', 0x80000002) creat(&(0x7f0000000040)='./file0\x00', 0x0) read(r0, &(0x7f0000000000)=""/177, 0xb1) 16:39:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x40020000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:07 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x500000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:07 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x77, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e20, 0x3, @empty, 0x1ff}}}, &(0x7f0000000400)=0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000440)={0xffff, 0x800c, 0x20, 0x0, r2}, &(0x7f0000000480)=0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f0000000300)) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000180)=0x4) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) r4 = shmget$private(0x0, 0x2000, 0x820, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r4, 0xc) [ 247.779256] binder: BINDER_SET_CONTEXT_MGR already set [ 247.785530] binder: 15346:15354 ioctl 40046207 0 returned -16 [ 247.802160] binder: BINDER_SET_CONTEXT_MGR already set [ 247.806226] binder: 15346:15365 IncRefs 0 refcount change on invalid ref 4 ret -22 [ 247.815150] binder: 15346:15362 ioctl 40046207 0 returned -16 [ 247.815324] binder: 15346:15365 BC_ACQUIRE_DONE u0000000000000000 no match 16:39:07 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x8055, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:07 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 248.022681] binder: BINDER_SET_CONTEXT_MGR already set [ 248.029359] binder: 15382:15391 ioctl 40046207 0 returned -16 [ 248.042756] binder: 15382:15391 BC_ACQUIRE_DONE u0000000000000000 no match [ 248.066340] binder: 15382:15394 tried to acquire reference to desc 0, got 1 instead [ 248.074681] binder: 15382:15394 BC_ACQUIRE_DONE node 932 has no pending acquire request 16:39:08 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x3, 0x0, 0x0, 0x8e0}]}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={"6e72300100", 0x2}) 16:39:08 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r0, r1, 0x0) 16:39:08 executing program 7: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x300000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer\x00', 0x41, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000340)={0x0, 0x4b, &(0x7f00000002c0)="98c472dde9873ad86a2eef69995125b0bf9c340602febaa2c53c2c8c5bb4a5ff76b8c5e8b4ca57cbded8c4e4bebb7dd2ec4042817e934a841ae21f357f0864686f383722a2ce57ef412a44"}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:08 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 16:39:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x1100, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 248.841318] binder: 15420:15429 tried to acquire reference to desc 0, got 1 instead [ 248.849580] binder: 15420:15429 BC_ACQUIRE_DONE node 936 has no pending acquire request [ 248.895175] binder: BINDER_SET_CONTEXT_MGR already set [ 248.910650] binder: 15420:15429 ioctl 40046207 0 returned -16 [ 248.927618] binder: 15420:15445 BC_ACQUIRE_DONE u0000000000000000 no match [ 248.935986] binder: BINDER_SET_CONTEXT_MGR already set [ 248.941996] binder: 15420:15429 ioctl 40046207 0 returned -16 16:39:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f942070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'irlan0\x00', 0x1}) ioctl$TUNSETOFFLOAD(r1, 0x400454d4, 0x0) 16:39:08 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, "e91f7189591e9233614b00"}, 0xc) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000280)=@file={0x1, "e91f7189591e9233614b00"}, 0x6e) r2 = dup2(r1, r1) r3 = accept$inet6(r2, 0x0, &(0x7f00000000c0)=0x681f88ac0f8b9e88) write$P9_RLERRORu(r3, &(0x7f0000000180)={0xe, 0x7, 0x0, {{0x1, '+'}}}, 0xe) 16:39:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x2, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:08 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f0000001600)={&(0x7f0000000040)=@in={0x2, 0x0, @dev={0xac, 0x14, 0x14}}, 0x10, &(0x7f0000001300)=[{&(0x7f0000000300)='(', 0x1}], 0x1, &(0x7f0000001540)}, 0x40) 16:39:08 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/zero\x00', 0x402, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000500)={0xb948, 0x100, 0x100000001, 0x3f, 0xfd, 0x5, 0x8000, 0x4, 0x0, 0x9, 0x7}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') r2 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40008000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0xc4, r3, 0x600, 0x70bd2c, 0x25dfdbfe, {0xb}, [@IPVS_CMD_ATTR_DEST={0x48, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local={0xac, 0x14, 0x14, 0xaa}}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xba}]}, @IPVS_CMD_ATTR_DAEMON={0x44, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x6f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xfff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x200}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x87}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x200}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4004044}, 0x48800) r4 = getpgrp(0xffffffffffffffff) sendmsg$nl_netfilter(r1, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4400000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000780)={0x10fc, 0x13, 0x5, 0x3be5d09d49c0f54d, 0x70bd26, 0x25dfdbff, {0xa, 0x0, 0x5}, [@typed={0x14, 0x12, @str='/dev/input/mice\x00'}, @typed={0x8, 0x2, @pid=r4}, @generic="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", @generic="a951df674ca2965426a79cf509dedd1fd6bb70aafda85dacda22baabaef8b144bb7a99244acccdb86d9476d88dda05f8f18d4987551e97d0501957a0cbc0e842fc79192a3fe5c8e3797db221701b5f377cb0f9b835cd9ab4475f5af8ff9b837dcc07b467292da759f8940c64508bec9327e1c958b4946c3b7cf27a7c1192df642751d60a8f21c20234aea3e8a74a8c6069de4a1a05696f57ee634cc354f0eb81b461420cabc3277d48ef7bceb9a8", @nested={0x10, 0x49, [@typed={0xc, 0x1c, @str='self]\x00'}]}, @typed={0x8, 0x42, @u32=0x7}, @nested={0x4, 0x44}]}, 0x10fc}, 0x1}, 0x20000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:08 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x246e010000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:08 executing program 5: r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x2000000000000002, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000080)}, {&(0x7f0000000300)="fb0153d83af0215ebad9fc342d14fcac304d10cc6180055b2ce0187eec38c5e26b556eaee7c8c87d378fe5c7d87b355795d7bf9e3db227d0c41086e3e799595a4a9c17f650f8d38407580ca553d27c3e0129826dfcaf5eb712a6982d51bb44c98928b395175bdd988d2b4d344453234990481a9aec1d911cfc327e3573aef6eb4a30ea834f3cf0aa1c797db52a79fff521918ca19c8c16e3c16a78c6a8c515b58214a906", 0xa4}, {&(0x7f0000000480)="2d70d7789a0f70410c6fa72faf9f44fc559b6e53a7e237c5523e9624ab811e080f445fd9d2bdff9584a43dec573cace973cadbb714b90fc1c0b47d5e44eb191754213db1fdb02324137e644ec275d88273b7290fc76c9c7adaa141a139ba4f41cc65f38ffafe14d65ca026e7823c00c47c4d80230e4108e4ff5642e45a742c7fa62726534ad423b3b0bec85d44cf31cfb6cf58e75b2b48e84ed27c414a1096dd4e98eda8c0f53cef949b9a23abb82513cbceb4ca12c9838f", 0xb8}, {&(0x7f0000000600)="71f9faaec3506d135a5ed8aa", 0xc}], 0x4) fremovexattr(0xffffffffffffffff, &(0x7f0000000080)=@known='user.syz\x00') 16:39:08 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x8055000000000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 249.149013] binder: 15459:15467 tried to acquire reference to desc 0, got 1 instead [ 249.157178] binder: 15459:15467 BC_ACQUIRE_DONE node 941 has no pending acquire request 16:39:08 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x60000000) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000000)={"7465856c30000000000000a2e3590008", @ifru_data=&(0x7f0000000040)="165cd3c4afe5ac1be2529ba70feff200786c5ad9aaaec4295e1ab04bf91e1aa3"}) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000)=0x10001, 0x10) [ 249.206412] binder: BINDER_SET_CONTEXT_MGR already set [ 249.215620] binder: 15459:15467 ioctl 40046207 0 returned -16 [ 249.227825] binder: 15459:15475 BC_ACQUIRE_DONE u0000000000000000 no match [ 249.237263] binder: BINDER_SET_CONTEXT_MGR already set [ 249.244261] binder: 15459:15467 ioctl 40046207 0 returned -16 [ 249.437428] IPVS: ftp: loaded support on port[0] = 21 [ 249.498162] IPVS: ftp: loaded support on port[0] = 21 16:39:09 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x0, 0xffffffffffffffff, 0x0) 16:39:09 executing program 3: setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x0, 0x0, "bc7b08465d096b93adc617c990b3a6743889252c2b2e7ab85284b5a6c52723ebc883e696549416b7e48a1fe40121f54508af0f542f552193ea2e26d45a95d93321b455abd393e85e92389fcc35d0d666"}, 0xd8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000100)=@hopopts={0x0, 0x6, [], [@generic={0x7, 0x2e, "bbbb3fff06862252359bba54f69eea117bd840bb33e1f6f57a68607feb46c97f65c0fa12139d6bb6dc8b77330b60"}]}, 0x38) setsockopt$inet6_opts(r0, 0x29, 0x36, &(0x7f0000000080)=@fragment, 0x0) 16:39:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x3000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="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", 0x114}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad07d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c5100000000000000000000", 0xbb}], 0x2, &(0x7f0000000200), 0x9, 0x8000}, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x1a) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:09 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000180)="025cc80a2b345f8f762070") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xaa}, 0x4}, 0x1c) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f000014f000)={&(0x7f00003c7ff4)={0x10}, 0xc, &(0x7f00000bfff0)={&(0x7f0000006440)=ANY=[@ANYBLOB="b8000000190001000000000000000000ff000000000000000000000000000001e000000100000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x3}, 0x1}, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, 0x0, 0x32b}, 0x90) 16:39:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0xffffffff00000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:09 executing program 6: 16:39:09 executing program 6: 16:39:09 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 249.958729] binder: 15510:15517 IncRefs 0 refcount change on invalid ref 50331648 ret -22 [ 249.967354] binder: 15510:15517 BC_ACQUIRE_DONE node 946 has no pending acquire request 16:39:09 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x4002000000000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:09 executing program 5: 16:39:09 executing program 3: [ 250.027677] binder: BINDER_SET_CONTEXT_MGR already set [ 250.044153] binder: 15510:15517 ioctl 40046207 0 returned -16 [ 250.062538] binder: 15510:15523 IncRefs 0 refcount change on invalid ref 50331648 ret -22 16:39:09 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cuse(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/cuse\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000440)="6970365f7674693000a2db6dec90156bc32c337bd2e545d4e9f675e13cb4bd45df9286e4947cacf639caf1bfa53a51844db0aeb2ca27da0685c848d810f6eae658624c9efff0aaee5219d08de11fa32217892eceaec1553c029e51d0") socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000180)=0x0) ioctl$KVM_GET_EMULATED_CPUID(r2, 0xc008ae09, &(0x7f0000000380)=""/149) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r3, 0x2, &(0x7f00000002c0)=""/142) ioctl$PIO_FONTX(r2, 0x4b6c, &(0x7f00000004c0)="1f0b677514acbddb4805842873d45cdef2100939540af8bf9d9404f40b2899ce68ad1762fa955ac92e23a02f582f35662b5300d5a7b8809975eb39169780ab639b5e09d94be314b98645012f327f94338b05bbd8e49805fb275a7356f01828e4e327ea22bfc06d5ee3e552f26bb791d9562f9c5e2a296e8875ed24101151780246c48210ddcb2c4ab7f99ab0b497ce4f142ad063db06789e12346631bc4fea6e2248e6008d97bf3c17fcbf40050acd7c13fce60452c98acc") 16:39:09 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x500}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 250.071305] binder: 15510:15523 BC_ACQUIRE_DONE u0000000000000000 no match [ 250.088143] binder: BINDER_SET_CONTEXT_MGR already set [ 250.093827] binder: 15510:15517 ioctl 40046207 0 returned -16 16:39:09 executing program 6: [ 250.320144] binder: 15543:15549 IncRefs 0 refcount change on invalid ref 1280 ret -22 [ 250.328346] binder: 15543:15549 BC_ACQUIRE_DONE node 950 has no pending acquire request [ 250.399234] binder: BINDER_SET_CONTEXT_MGR already set [ 250.408145] binder: 15543:15549 ioctl 40046207 0 returned -16 [ 250.429252] binder: 15543:15554 IncRefs 0 refcount change on invalid ref 1280 ret -22 [ 250.437371] binder: 15543:15554 BC_ACQUIRE_DONE u0000000000000000 no match [ 250.452370] binder: BINDER_SET_CONTEXT_MGR already set [ 250.467229] binder: 15543:15549 ioctl 40046207 0 returned -16 16:39:10 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x0, 0xffffffffffffffff, 0x0) 16:39:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:10 executing program 5: 16:39:10 executing program 3: 16:39:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x11000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0xa, 0x1, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x8}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000340)={r2, 0x1}, &(0x7f0000000380)=0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180), 0x10) 16:39:10 executing program 6: 16:39:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4b05}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$msdos(&(0x7f0000000180)='msdos\x00', &(0x7f0000000100)='./file0\x00', 0x1e800, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = open(&(0x7f0000021000)='./file0\x00', 0x0, 0x0) mknodat(r1, &(0x7f0000000040)="2e2f636f6e74726f6cff05", 0x0, 0x0) unlinkat(r1, &(0x7f0000000080)="2e2f636f6e74726f6cff2e00", 0x0) 16:39:10 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:10 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r1, &(0x7f00004c0000)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r1, 0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f000087dffe)='F', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) r3 = accept4(r1, 0x0, &(0x7f0000da8ffc), 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={0x0, @in={{0x2}}, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x98) 16:39:10 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f00000000c0)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) sendto$inet6(r0, &(0x7f0000000100)='{', 0x1, 0x50, &(0x7f0000aa9000)={0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xffffffffffffffff}, 0x2}, 0x1c) [ 251.055162] binder: 15572:15577 IncRefs 0 refcount change on invalid ref 19205 ret -22 [ 251.063469] binder: 15572:15577 BC_ACQUIRE_DONE node 954 has no pending acquire request 16:39:10 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4) write$binfmt_elf64(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x18d) 16:39:10 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:10 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6c00000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 251.109360] binder: BINDER_SET_CONTEXT_MGR already set [ 251.115557] binder: 15572:15577 ioctl 40046207 0 returned -16 [ 251.126513] binder: 15572:15581 IncRefs 0 refcount change on invalid ref 19205 ret -22 [ 251.134867] binder: 15572:15581 BC_ACQUIRE_DONE u0000000000000000 no match [ 251.142350] binder: BINDER_SET_CONTEXT_MGR already set [ 251.148210] binder: 15572:15577 ioctl 40046207 0 returned -16 [ 251.406879] binder: 15599:15609 tried to acquire reference to desc 0, got 1 instead [ 251.414909] binder: 15599:15609 BC_ACQUIRE_DONE node 958 has no pending acquire request 16:39:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) [ 251.477533] binder: BINDER_SET_CONTEXT_MGR already set [ 251.502484] binder: 15599:15609 ioctl 40046207 0 returned -16 [ 251.517931] binder: 15599:15615 BC_ACQUIRE_DONE u0000000000000000 no match [ 251.541476] binder: BINDER_SET_CONTEXT_MGR already set [ 251.549048] binder: 15599:15609 ioctl 40046207 0 returned -16 [ 251.772620] ALSA: seq fatal error: cannot create timer (-22) 16:39:11 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x0, 0xffffffffffffffff, 0x0) 16:39:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x11, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:11 executing program 3: socket$packet(0x11, 0x0, 0x300) sched_setaffinity(0x0, 0x7, &(0x7f00000000c0)=0x9) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x5, 0x0, "bc7b08465d096b93adc617c990b3a6743889252c2b2e7ab85284b5a6c52723ebc883e696549416b7e48a1fe40121f54508af0f542f552193ea2e26d45a95d93321b455abd393e85e92389fcc35d0d666"}, 0xd8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000005c40)={{{@in=@loopback, @in6=@local}}, {{@in6}, 0x0, @in=@multicast2}}, &(0x7f0000005d40)=0xe8) sendmmsg(0xffffffffffffffff, &(0x7f00000076c0)=[{{&(0x7f0000006280)=@hci={0x1f}, 0x80, &(0x7f00000073c0)=[{&(0x7f0000006300)}], 0x1, &(0x7f0000000e40)=ANY=[]}, 0x9}], 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, &(0x7f0000000240)={'icmp\x00'}, &(0x7f0000000280)=0x1e) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000480)='/dev/rfkill\x00', 0x82, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000e11ff0)=[{&(0x7f0000000140)="580000001400add427323b470c458c5602067fffffff81004e220000ac1414aa0b4824ca945f64009400050028925aa80000000000000080000efffeffe809000000fff5dd00000010000100090a1000410400000000fcff", 0x58}], 0x1) 16:39:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0xa00000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:11 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:11 executing program 5: perf_event_open(&(0x7f00000004c0)={0x2, 0x70, 0x72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000100)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f0000012000/0x4000)=nil, 0x4000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000002000)={0xaa}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_mreqsrc(r3, 0x0, 0x2000000000000004, &(0x7f0000013ff4)={@local={0xac, 0x14, 0x14, 0xaa}, @rand_addr}, 0xc) close(r3) dup3(r1, r2, 0x0) 16:39:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) [ 252.222908] binder: 15635:15644 tried to acquire reference to desc 0, got 1 instead [ 252.225892] ALSA: seq fatal error: cannot create timer (-22) [ 252.231208] binder: 15635:15644 BC_ACQUIRE_DONE node 963 has no pending acquire request 16:39:11 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000002940)="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", 0x2, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000600)={'NETMAP\x00'}, &(0x7f0000000640)=0x1e) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x1c}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000003c00)=[{0x4a, 0x0, 0x9, "9f115e793bb4da6274d75390ea52d87abc14287da15473ea0eb219272f4f11cef289508b217c0c59991625d4e71e9f8b68f40149438ae83ad8343bf9f5b32c36cff49be6c7311fcfab9d5f6a5b2a652e95e9e7912a500d24ecf386f9e99d1d50d4beacee6d572b960560b090679f31ee5b77a2359533f9634649968a132aeb3632068f3965"}, {0x38, 0x114, 0x7, "3334c2c14859e71305983eb2c6b97d8b3fe8e9fd836de8cac744c8bf1f3be54c58f430291c"}, {0x88, 0x101, 0x2, "1910ae7784e254c3a5c9b0a8a21634b361f999b885ec7cb076cea23dea702446f1e84cb4b425e6e747e0863cc26ef614617af18f011b963daf16872407d9022374723a9a3bc32a886c0200bf1775bf67eecf3e6a858bbe7901c18f8fcf639bc30aaa603b5d08d46999c6390769e6d5f150d5d447"}, {0x90, 0x2000000000000ff, 0x8, "dcd7c792fdc66926f419d3a421d925eaff747d429aa40d7b927a5dc111a1a58be6483638ad93624c0a9983c38bf8fd4689882c56b326cb691c2e5f34e7da70a68cf08c4e06e53c4618711330e599bb16d5e2ec1bedc00f936c4e3c7623f01eb7e253fdecb46e3c899fd1b136cafc966c0ca898f9d141d79632e0fe36b2091f"}, {0xf8, 0x117, 0x4, "0494da9af8f63b490cf3ae73949a2c042a6c737fce3353bad73241913f1a077dd931a79045af0ac90af87a56983c1d3f54c2bc2790129d11fe74724345d2ed0b318610a55d327480c75b4482d7cc4c8a22627c9a0270b0c30e87ce92830c44e5a86bcce028b04072104ab693ab629f1df18629228908dc19f14064d2f5bbf12861eec93781e8ac4c3a64d386339149d81977a55d2b34fc7b61aa8c02e2ab0387b64755c035e9f535763921b1f4c1bcdfed5f0c6ed13e122476d99afb493c77578a993bb9cdfd00448dab8f18b6fae7858aa25a4e081ad4b50b890e22eae15bf65a9e6e0c22"}, {0x1010, 0x117, 0x1, "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"}, {0x88, 0x10f, 0x200, "f3411e68df71303c0cbdebf114e4f5b4db4aad40af9c57a9d72bb1350a5b235f542ac96ba42e343da66e977b9d8b028caa11cfa5ce37e9b7d1716abe36b62aa57bc76c382017a0665489520a1c0490ef249e51fbdc072f082ca225dd6820c2ecf327d3b55141d00098b3317316e9d90d3d8862c1f7"}], 0x1378, 0x8000}, 0x0) socketpair(0x0, 0x1, 0x20000000000000, &(0x7f0000000680)={0xffffffffffffffff}) getrlimit(0xe, &(0x7f00000005c0)) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') readv(r1, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000180)=""/18, 0x12}, {&(0x7f0000000340)=""/231, 0xe7}, {&(0x7f0000000440)=""/81, 0x51}, {&(0x7f0000000780)=""/4096, 0x1000}, {&(0x7f0000001780)=""/4096, 0x101b}, {&(0x7f0000002780)=""/247, 0xf7}, {&(0x7f00000004c0)=""/15, 0xf}], 0x8) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:11 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:11 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x100000000000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:11 executing program 3: syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ip6_flowlabel\x00') sendfile(r1, r2, &(0x7f00000000c0)=0x2, 0x400) 16:39:11 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x2000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 252.336764] binder: BINDER_SET_CONTEXT_MGR already set [ 252.343123] binder: 15635:15644 ioctl 40046207 0 returned -16 [ 252.346040] binder: BINDER_SET_CONTEXT_MGR already set [ 252.359210] binder: 15635:15653 BC_ACQUIRE_DONE u0000000000000000 no match [ 252.369280] binder: 15635:15652 ioctl 40046207 0 returned -16 16:39:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000000)="025cc83d6d345f8f762070") syz_emit_ethernet(0x8e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa0086dd6006f52600583a00fe80000000000000000000000000ffff020000000000000000000000000001020090780000003f600a07ec0ae32900fe8000000000000000000000000000ffff000000000000000002ff0700140000a82f7ae1cd16d2e29ec370b184e075025dd0d40c29be46586985ea5d7b12d99989c2ad53524ba53f6c00"], &(0x7f0000000100)) 16:39:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x1000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 252.546505] ALSA: seq fatal error: cannot create timer (-22) [ 252.573385] binder: 15674:15678 IncRefs 0 refcount change on invalid ref 8192 ret -22 [ 252.581797] binder: 15674:15678 BC_ACQUIRE_DONE node 968 has no pending acquire request [ 252.621864] binder: BINDER_SET_CONTEXT_MGR already set [ 252.629699] binder: 15674:15678 ioctl 40046207 0 returned -16 [ 252.638986] binder: 15674:15679 IncRefs 0 refcount change on invalid ref 8192 ret -22 [ 252.638990] binder: BINDER_SET_CONTEXT_MGR already set [ 252.639013] binder: 15674:15678 ioctl 40046207 0 returned -16 [ 252.647309] binder: 15674:15679 BC_ACQUIRE_DONE u0000000000000000 no match 16:39:12 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup2(r0, r1) ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000080)={0x34}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000100)="0fc5f40bf00fb020dfdbb9840b00000f32c4c2a598d6c4e272f51d00780000c4c2f91cc2c4c2550c84eb00000000c4c16812f566ba4200b81f7c1097ef", 0x3d}], 0x1, 0x32, &(0x7f0000000180), 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f0000000040)=ANY=[@ANYBLOB="020000000000000001000000000000000000000000000000000000000000000008000080f87e"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:39:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') lseek(r1, 0x0, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x6c00}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:12 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x11, 0x80002, 0x0) r2 = dup(r0) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, 0x4000}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockopt$packet_buf(r1, 0x107, 0x6, &(0x7f0000000100)=""/82, &(0x7f0000000000)=0x52) 16:39:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x2000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:12 executing program 0 (fault-call:1 fault-nth:0): clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:12 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 253.337920] binder: 15703:15708 IncRefs 0 refcount change on invalid ref 27648 ret -22 [ 253.346457] binder: 15703:15708 BC_ACQUIRE_DONE node 972 has no pending acquire request [ 253.368169] ALSA: seq fatal error: cannot create timer (-22) [ 253.374231] binder: BINDER_SET_CONTEXT_MGR already set [ 253.385687] binder: 15703:15708 ioctl 40046207 0 returned -16 16:39:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r2, r1) 16:39:12 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x80550000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:12 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x20000, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f00000000c0)=0x20, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000040)=0xb, 0x4) 16:39:12 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000180)={0x6f}, 0x4) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x5, 0x4000000000080003, 0xfffffffffffffdfc, &(0x7f0000000740)) [ 253.427352] binder: 15703:15716 IncRefs 0 refcount change on invalid ref 27648 ret -22 [ 253.435675] binder: 15703:15716 BC_ACQUIRE_DONE u0000000000000000 no match [ 253.443183] binder: BINDER_SET_CONTEXT_MGR already set 16:39:12 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000380)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffe) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSTI(r5, 0x5412, 0x0) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000027000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000180)="660f38803568890000b9800000c00f3235000800000f300fc71b66470f3882935d0000000f323e67440f380583000001000f015944f3420f01dfb93d0b00000f3266ba410066b8c6a066ef", 0x4b}], 0xaaaabf0, 0x5d, &(0x7f0000000000), 0x32) ioctl$KVM_RUN(r0, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:39:12 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x2}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 253.475240] binder: 15703:15708 ioctl 40046207 0 returned -16 16:39:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x4002, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 253.644307] ALSA: seq fatal error: cannot create timer (-22) [ 253.668577] binder: 15743:15748 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 253.676485] binder: 15743:15748 BC_ACQUIRE_DONE node 976 has no pending acquire request 16:39:13 executing program 3: r0 = socket$inet6(0xa, 0x80000000007, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") inotify_init1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000003b40)={'broute\x00', 0x0, 0x4, 0xb9, [], 0x5, &(0x7f0000003a00)=[{}, {}, {}, {}, {}], &(0x7f0000003a80)=""/185}, &(0x7f0000003bc0)=0x78) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x251, r2, 0x0) getsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000003c00), &(0x7f00000041c0)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x7530}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@empty, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bind$inet(r3, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(0xffffffffffffffff, &(0x7f00009f3000), 0x352, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000140)=0x17f, 0x4) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000003c80)={0xa8, 0x9, 0x7}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xe0c9, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000002c0)=0x10, 0x4) ioctl$TIOCEXCL(r5, 0x540c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x6, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0xa0, 0xff}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 16:39:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r2, r1) 16:39:13 executing program 5: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/mixer\x00', 0x2040, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000180)=0x3, 0x4) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") creat(&(0x7f0000000240)='./file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)=0x4, 0x4) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f0000000040)=""/24, &(0x7f00000000c0)=0x18) r2 = perf_event_open(&(0x7f000000a000)={0x6, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x40082406, &(0x7f0000000080)="ff") [ 253.720117] binder: BINDER_SET_CONTEXT_MGR already set [ 253.727887] binder: 15743:15748 ioctl 40046207 0 returned -16 [ 253.739872] binder: 15743:15753 IncRefs 0 refcount change on invalid ref 2 ret -22 [ 253.747848] binder: 15743:15753 BC_ACQUIRE_DONE u0000000000000000 no match [ 253.757524] binder: BINDER_SET_CONTEXT_MGR already set [ 253.764675] binder: 15743:15748 ioctl 40046207 0 returned -16 16:39:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x600000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)) 16:39:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 253.927353] ALSA: seq fatal error: cannot create timer (-22) [ 253.981224] binder: 15775:15783 tried to acquire reference to desc 0, got 1 instead [ 253.989192] binder: 15775:15783 BC_ACQUIRE_DONE node 980 has no pending acquire request [ 254.015915] binder: BINDER_SET_CONTEXT_MGR already set [ 254.021987] binder: 15775:15783 ioctl 40046207 0 returned -16 [ 254.026150] binder: BINDER_SET_CONTEXT_MGR already set [ 254.033749] binder: 15775:15787 ioctl 40046207 0 returned -16 [ 254.033930] binder: 15775:15790 BC_ACQUIRE_DONE u0000000000000000 no match 16:39:13 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x5580, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:13 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4c050000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:13 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rfkill\x00', 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:13 executing program 3: r0 = socket$inet6(0xa, 0x80000000007, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") inotify_init1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000003b40)={'broute\x00', 0x0, 0x4, 0xb9, [], 0x5, &(0x7f0000003a00)=[{}, {}, {}, {}, {}], &(0x7f0000003a80)=""/185}, &(0x7f0000003bc0)=0x78) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x251, r2, 0x0) getsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000003c00), &(0x7f00000041c0)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x7530}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@empty, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bind$inet(r3, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(0xffffffffffffffff, &(0x7f00009f3000), 0x352, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000140)=0x17f, 0x4) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000003c80)={0xa8, 0x9, 0x7}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xe0c9, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000002c0)=0x10, 0x4) ioctl$TIOCEXCL(r5, 0x540c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x6, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0xa0, 0xff}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) 16:39:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) dup2(r2, r1) 16:39:13 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x0, 0x104) perf_event_open$cgroup(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x268, 0x0, 0x3f, 0x0, 0x2, 0x20, 0x0, 0x8c36, 0x29ae, 0x3f, 0x401, 0x0, 0x6, 0x9, 0x9, 0x6, 0x9, 0x9, 0x2, 0x5, 0x0, 0x0, 0x61f, 0x5, 0x99, 0x5, 0x7fffffff, 0x61, 0x9, 0x3, 0xd5b, 0x1f, 0xc2d, 0x80000001, 0x26359f74, 0x0, 0x7fffffff, 0x1, @perf_bp={&(0x7f0000000100), 0x8}, 0x10000, 0x10000, 0x0, 0x6, 0x0, 0x6, 0xffff}, r1, 0x7, 0xffffffffffffffff, 0x2) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000280)=0x4) r2 = add_key(&(0x7f0000000600)='rxrpc\x00', &(0x7f0000000640)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000680)="faa504838eb353121c55e4628c1ff74363baede79b1eec2cb662383f1de84e8b51b77041f6b00920947a8e7bd70562ec5bc51db3e220ed0f2add1bae84473d551a59c6e349093f21897b2dfbb990e1a0fdfb5dcc", 0x54, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000340)='rxrpc\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000005c0)='syz_tun\x00', r2) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000580)=@add_del={0x2, &(0x7f0000000540)='bridge_slave_0\x00', 0x5}) add_key(&(0x7f00000002c0)='.dead\x00', &(0x7f0000000300)={0x73, 0x79, 0x7a, 0x3}, &(0x7f00000003c0)="1e395fa44217fef0c66ba5b54caa75e44c860826bde55a4d03dee4d5063688ca0321ec322533563d8ea491c0f404e11eeb589df3ec9384054b584198ebf76d045d7b84f78a8cebb49b7c4cd7fa20a1adb99262341c785301ae46ac7eee6f8be7419400c57eae0f243eeae0cf3e7e4438139251e7e12c51356f7a01f0835463de1d93c8961fecc6cb0092859f6fbe6da35b2c29ba47c24682f3027c651e62553478f4a6371c17d19ae0bc828825ea9261e2e3ae9580efa85f58f75200c27b871b0a54be175e71027cb0a0a47945a3b7a2713cdfc4819b0840e46c703a2a71737b56d6f445894af77afb9db8e395db54914561ac", 0xf3, r3) accept4$inet(r0, &(0x7f0000000040)={0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'syz_tun\x00'}, 0x18) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x6002, 0x8000}) 16:39:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(0xffffffffffffffff, r1) [ 254.440352] ALSA: seq fatal error: cannot create timer (-22) [ 254.459748] IPVS: sync thread started: state = MASTER, mcast_ifn = syz_tun, syncid = 0, id = 0 [ 254.463131] binder: BINDER_SET_CONTEXT_MGR already set 16:39:13 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:13 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x1100000000000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) 16:39:13 executing program 5: r0 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x9, 0x400) ioctl$IOC_PR_PREEMPT(r0, 0x401870cb, &(0x7f0000000180)={0x259, 0x7, 0x1fb, 0xfffffffffffffffb}) r1 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r2 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) accept4$packet(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000040)=0x14, 0x800) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f00000000c0)={0xff, @broadcast=0xffffffff, 0x4e23, 0x4, 'nq\x00', 0x5, 0xad15, 0x19}, 0x2c) connect$can_bcm(r2, &(0x7f0000000080)={0x1d, r3}, 0x10) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x800) [ 254.520289] binder: 15820:15830 ioctl 40046207 0 returned -16 [ 254.540182] binder: 15820:15830 IncRefs 0 refcount change on invalid ref 1275396096 ret -22 [ 254.548924] binder: 15820:15830 BC_ACQUIRE_DONE u0000000000000000 no match 16:39:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000180)={0x0, 0x6, 0x10, 0x1f, 0x1, 0x3d, 0x4, 0x15}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x68000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:14 executing program 3: r0 = socket$inet6(0xa, 0x80000000007, 0x3) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f760070") inotify_init1(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r1, 0x0, 0x83, &(0x7f0000003b40)={'broute\x00', 0x0, 0x4, 0xb9, [], 0x5, &(0x7f0000003a00)=[{}, {}, {}, {}, {}], &(0x7f0000003a80)=""/185}, &(0x7f0000003bc0)=0x78) r2 = socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0x251, r2, 0x0) getsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000003c00), &(0x7f00000041c0)=0x4) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) socket$inet_sctp(0x2, 0x0, 0x84) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f00000003c0)={0x0, 0x7530}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)={@empty, @multicast2, @multicast1}, &(0x7f0000000100)=0xc) bind$inet(r3, &(0x7f0000dc9ff0)={0x2, 0x4e20, @rand_addr}, 0x10) r4 = socket$inet6(0xa, 0x1, 0x0) ioctl(r4, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') pread64(0xffffffffffffffff, &(0x7f00009f3000), 0x352, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x2, &(0x7f0000000140)=0x17f, 0x4) ioctl$KDGKBSENT(0xffffffffffffffff, 0x4b48, &(0x7f0000003c80)={0xa8, 0x9, 0x7}) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000280)='cpu.stat\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000400)='./file0\x00', 0xe0c9, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r5, 0x10e, 0x2, &(0x7f00000002c0)=0x10, 0x4) ioctl$TIOCEXCL(r5, 0x540c) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000180)={{{@in=@rand_addr=0x6, @in6=@remote={0xfe, 0x80, [], 0xbb}, 0x4e23, 0x0, 0x4e24, 0x7, 0xa, 0xa0, 0xa0, 0xff}}, {{@in6=@ipv4={[], [0xff, 0xff], @rand_addr}}, 0x0, @in=@dev={0xac, 0x14, 0x14}}}, 0xe8) setsockopt$sock_int(r3, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x4) sendto$inet(r3, &(0x7f0000000100), 0x229f, 0x4008000, 0x0, 0xb4) [ 254.564904] binder: 15820:15842 IncRefs 0 refcount change on invalid ref 1275396096 ret -22 [ 254.573558] binder: 15820:15842 BC_ACQUIRE_DONE node 987 has no pending acquire request 16:39:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 254.703754] ALSA: seq fatal error: cannot create timer (-22) 16:39:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x200000000000000, &(0x7f00000001c0)={0x2, 0x0, @rand_addr}, 0x10) [ 254.785922] binder: 15860:15868 IncRefs 0 refcount change on invalid ref 1744830464 ret -22 [ 254.794815] binder: 15860:15868 BC_ACQUIRE_DONE node 990 has no pending acquire request [ 254.829946] binder: BINDER_SET_CONTEXT_MGR already set [ 254.837879] binder: 15860:15868 ioctl 40046207 0 returned -16 [ 254.846382] binder: 15860:15873 IncRefs 0 refcount change on invalid ref 1744830464 ret -22 [ 254.855122] binder: 15860:15873 BC_ACQUIRE_DONE u0000000000000000 no match [ 254.863275] binder: BINDER_SET_CONTEXT_MGR already set [ 254.869173] binder: 15860:15868 ioctl 40046207 0 returned -16 16:39:14 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000003, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0xab53, 0x0, @rand_addr}, 0x10) 16:39:14 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:14 executing program 5: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x2}}, 0x20) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x80000, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f00000002c0)={r2}) r3 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x490000) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000100)=0x5, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) accept$inet(r4, &(0x7f0000000140)={0x0, 0x0, @remote}, &(0x7f0000000200)=0x10) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000080)={0x7, 0x8, 0xfa00, {r1}}, 0x10) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000240)={0x3ff, 0x4}) write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000940)={0x7, 0x8, 0xfa00, {r1}}, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r3, 0x800448d2, &(0x7f0000000300)={0x1, &(0x7f0000000880)=[{}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000380)={{0x3, 0x4, 0x1, 0xd159, '\x00', 0x5}, 0x1, [0xffffffffffffffe0, 0xffff, 0x3ff, 0x36b, 0x7905bf7a, 0x5, 0x3ff, 0x6, 0x8ae, 0x7, 0xfffffffffffffffe, 0x9, 0x5904, 0x5, 0x40, 0x7, 0x7fffffff, 0x6, 0xfff, 0x20, 0xfffffffffffffffa, 0x38, 0x2, 0x1, 0x8, 0xfffffffffffffffc, 0x0, 0x7fffffff, 0x7, 0x7, 0xc732, 0x1, 0x8, 0xa, 0x6, 0xcf5b, 0x400, 0x9a, 0x5, 0xabd, 0xf14, 0x5, 0xd50b, 0x0, 0x71542a8d, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5, 0x81, 0x9, 0x3ff, 0x80, 0x80000000, 0x7, 0x0, 0x8ec0000000000, 0x2, 0x1ff, 0x6, 0x80, 0x2, 0x3, 0x8, 0x3, 0x6, 0x7e, 0x6, 0x4, 0x4, 0x1ff, 0x6e8, 0x3f, 0x2, 0x1, 0x718, 0x0, 0x7, 0x2c2, 0x9, 0xff, 0x2, 0xba8, 0x770bac51, 0x10001, 0x3ff, 0x5, 0x100000000, 0xfffffffffffffff9, 0x20, 0x7, 0x0, 0x81, 0xff, 0x9, 0x1, 0xffff, 0xe28, 0x6, 0x4808, 0x0, 0x6694, 0x5, 0x2, 0x2, 0x101, 0x3, 0x9, 0x7ff, 0x10001, 0x9, 0x7, 0x1, 0x7, 0xba, 0x8f8, 0x81, 0xffff, 0x8, 0x262, 0x1, 0x7fffffff, 0x434, 0x2, 0xffffffff, 0x836a, 0x5, 0x6, 0x6a], {0x77359400}}) mremap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb000, 0x3, &(0x7f0000ff2000/0xb000)=nil) 16:39:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:14 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000e00)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0xfffffffffffffffe, 0x1, 0x0, 0x40000000000fcae}) r1 = syz_open_pts(r0, 0x0) ioctl$TCSETAF(r1, 0x5412, &(0x7f00000000c0)={0xa}) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/mixer\x00', 0x880, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000240)={{0xff, @loopback=0x7f000001, 0x4e22, 0x2, 'ovf\x00', 0x8, 0x10001, 0x37}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e21, 0x1, 0xb7d6, 0x4, 0xa4}}, 0x44) r3 = dup2(r0, r0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x33, 0x3, 0x0, 0x9, 0x14, 0x8, "7f7e00c1ce1a6023833a21fc1f82522c2246cf8d721393182ad075abff4829c51a21ef5a39501705eee22c651d62f8c2434cd7b72e37e61fd8080b0a5d634b15", "87d4ddd198062a43c27da2eb6e90ce1f15d6424ebf84a70f89898b630eea6028c04875345ecb1c249146da2d3f66e58be5a0909110f8f6e8175729bd3b1b57ea", "615373187f18ff5f2414f88c75713d7d65bd079b2201746984b7934baf47ce9d", [0xb3b, 0x3]}) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00', 0x0, 0x5}, 0x10) 16:39:14 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4c00}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:14 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 255.485684] binder: BINDER_SET_CONTEXT_MGR already set [ 255.497761] binder: 15897:15906 ioctl 40046207 0 returned -16 16:39:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x200000000000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6}, 0xffffffffffffff8e) sendmmsg$inet_sctp(r1, &(0x7f0000871fc8)=[{&(0x7f000086c000)=@in6={0xa, 0x0, 0x2}, 0x1c, &(0x7f0000d1e000), 0x0, &(0x7f0000dda000)}], 0x492492492492510, 0x0) 16:39:14 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x80550000, @rand_addr}, 0x10) 16:39:15 executing program 3: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x0) r1 = socket$inet6(0xa, 0x6, 0x0) r2 = dup3(r1, r0, 0x0) connect$llc(r2, &(0x7f0000000040)={0x1a, 0x4, 0x0, 0x5f07d646, 0x3ff, 0x44, @random="fd6bb8c1026a"}, 0x10) 16:39:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0xfdfdffff00000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 255.526456] binder: 15897:15906 IncRefs 0 refcount change on invalid ref 19456 ret -22 [ 255.534904] binder: 15897:15906 BC_ACQUIRE_DONE u0000000000000000 no match [ 255.547713] binder: 15897:15919 IncRefs 0 refcount change on invalid ref 19456 ret -22 [ 255.555943] binder: 15897:15919 BC_ACQUIRE_DONE node 996 has no pending acquire request 16:39:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') write$P9_RAUTH(r1, &(0x7f0000000440)={0x14, 0x67, 0x1, {0x10, 0x4, 0x4}}, 0x14) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000180)={0x0, 0x3}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000300)={r3, 0xf0, "5d03e9a0f0f2c0bc9745b85c3140faffd216ba473ba09fe9599f982f77288b7464b13de0bfb138cd0c2dbfb3c835001d57f961081dfa856171502f29c0a3e7c17b919a3893e4e950e6d5f9eda0c0aefb665e2c903743c4749cf76e603d6e5ed2a5a5b70aa4938af05b1c2d9f3e4b57d4258bc61297a66e0088cb6da1474d9e5c1e7106f796385ed535f790c4e419ca0fa06a65591b669bface280beca685f772f0d2ebff19aecf9573b4a5ed5670eacf0b7c0e725cd7302bc15e07136672c7f810dbbaa801cd7844c180b5f08bbf7070adf8f07943ae88dc2ac8e78f98a177932604b19d7ece79e4b92b7734751fa12a"}, &(0x7f0000000400)=0xf8) 16:39:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:15 executing program 5: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x34, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x810, r1, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) ioctl$int_out(r0, 0xc0305710, &(0x7f0000000100)) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet_mreqn(r0, 0x0, 0x0, &(0x7f00000000c0)={@loopback, @multicast1, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'ip6_vti0\x00', 0x0}) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000280)={@dev, 0x0}, &(0x7f00000002c0)=0x14) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000840)={'bcsf0\x00', 0x0}) accept4$packet(r0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000008c0)=0x14, 0x80000) accept(r0, &(0x7f0000000900)=@xdp={0x0, 0x0, 0x0}, &(0x7f0000000980)=0x80) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f00000009c0)={@mcast1, 0x0}, &(0x7f0000000a00)=0x14) accept4$packet(r0, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000a80)=0x14, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000ac0)={{{@in6=@mcast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}}}, &(0x7f0000000bc0)=0xe8) getsockname$packet(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000c40)=0x14) getpeername$packet(r0, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000d80)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@remote}}, &(0x7f0000000ec0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002040)={{{@in=@multicast1, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000fc0)=0xe8) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000002140)={@multicast1, @multicast2, 0x0}, &(0x7f0000002180)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{{@in6=@dev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@loopback}}, &(0x7f00000022c0)=0xe8) accept$packet(r0, &(0x7f00000023c0)={0x0, 0x0, 0x0}, &(0x7f0000002400)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000002440)={'vcan0\x00', 0x0}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000002480)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000002580)=0xe8) accept4(r0, &(0x7f00000045c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000004640)=0x80, 0x80000) getpeername$packet(r0, &(0x7f0000004940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000004980)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000049c0)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000004ac0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000004b00)={'bpq0\x00', 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000004b80)={{{@in=@multicast2, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000004c80)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004cc0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000056c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4002400}, 0xc, &(0x7f0000005680)={&(0x7f0000004d00)={0x968, r3, 0x308, 0x70bd2c, 0x25dfdbfd, {0x3}, [{{0x8, 0x1, r4}, {0x80, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r6}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xcfa}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x101}}}]}}, {{0x8, 0x1, r7}, {0x74, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7b5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r8}, {0xc4, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x80000000}}}]}}, {{0x8, 0x1, r10}, {0x1fc, 0x2, [{0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r11}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0xed}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r12}}, {0x8, 0x7}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r13}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r14}}, {0x8, 0x7}}}]}}, {{0x8, 0x1, r15}, {0x148, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8, 0x3, 0x5}, {0x14, 0x4, 'activebackup\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r16}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x5}}, {0x8, 0x6, r17}}}, {0x84, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8, 0x3, 0xb}, {0x54, 0x4, [{0xc097, 0x7, 0x100000001, 0x3}, {0x380000000, 0x6, 0x7, 0xffffffff80000001}, {0x8, 0x0, 0x6, 0x1e2}, {0x3, 0x7, 0x1, 0x40}, {0x7, 0x100000000, 0x9, 0x1}, {0x1, 0x2, 0x4, 0x6}, {0x3, 0xfff, 0x5, 0x6}, {0x10000, 0x7fff, 0xffff, 0x5}, {0x101, 0x64d96ac7, 0xffffffffffffffff, 0x4}, {0x25a, 0x1, 0x7, 0x101}]}}}]}}, {{0x8, 0x1, r18}, {0x138, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8, 0x3, 0xe}, {0x8, 0x4, 0x67c5}}, {0x8, 0x6, r19}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, r20}}}]}}, {{0x8, 0x1, r21}, {0xbc, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x42b6}}, {0x8, 0x6, r22}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x100000001}}, {0x8, 0x6, r23}}}]}}, {{0x8, 0x1, r24}, {0x15c, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x1ec0c022}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x7e}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8, 0x3, 0x5}, {0xc, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8, 0x3, 0x6}, {0x4, 0x4}}, {0x8, 0x6, r25}}}]}}, {{0x8, 0x1, r26}, {0x44, 0x2, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8, 0x3, 0x3}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r27}}}]}}]}, 0x968}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) [ 255.781354] binder: 15938:15948 tried to acquire reference to desc 0, got 1 instead [ 255.789288] binder: 15938:15948 BC_ACQUIRE_DONE node 999 has no pending acquire request [ 255.848804] binder: BINDER_SET_CONTEXT_MGR already set [ 255.870124] binder: 15938:15948 ioctl 40046207 0 returned -16 [ 255.878723] binder: 15938:15954 BC_ACQUIRE_DONE u0000000000000000 no match [ 255.879652] binder: BINDER_SET_CONTEXT_MGR already set [ 255.891219] binder: 15938:15948 ioctl 40046207 0 returned -16 [ 256.054944] binder: 15961:15966 ioctl 8933 20002440 returned -22 [ 256.100480] binder: 15961:15966 ioctl 8933 20002440 returned -22 16:39:15 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x8000000000b, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x1100, @rand_addr}, 0x10) 16:39:15 executing program 3: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000804000)) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = inotify_init1(0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x10081, 0x0) ioctl$KIOCSOUND(r1, 0x4b2f, 0x3) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r2, &(0x7f00000002c0)=&(0x7f0000000180)={&(0x7f00000000c0), 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000200)=0xc) 16:39:15 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp\x00', 0x10200, 0x0) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x4c00000000000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) write$binfmt_elf32(r1, &(0x7f0000000d80)=ANY=[@ANYBLOB="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"], 0x1f1) ioctl$fiemap(r1, 0x40086602, &(0x7f0000000080)=ANY=[@ANYBLOB="83e493e8c7"]) write$cgroup_type(r1, &(0x7f0000000000)='threaded\x00', 0xfe63) truncate(&(0x7f0000000040)='./file0\x00', 0x0) 16:39:15 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:15 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x8055000000000000, @rand_addr}, 0x10) [ 256.334745] binder: 15980:15990 tried to acquire reference to desc 0, got 1 instead [ 256.342719] binder: 15980:15990 BC_ACQUIRE_DONE node 1004 has no pending acquire request [ 256.374785] binder: BINDER_SET_CONTEXT_MGR already set 16:39:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:15 executing program 3: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3b7, 0x400) ioctl$IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000100)={0x9, 0xb77, 0x1}) mkdir(&(0x7f0000001680)='./file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) ioctl$TUNSETGROUP(r0, 0x400454ce, r1) mount(&(0x7f0000900ff8)='./file0\x00', &(0x7f000001c000)='./file0\x00', &(0x7f0000982ff9)='mqueue\x00', 0x0, &(0x7f0000ebcffe)) r2 = creat(&(0x7f0000000140)='./file0/bus\x00', 0x0) poll(&(0x7f00000000c0)=[{r2}], 0x1, 0x5) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000200), 0x4) splice(r2, &(0x7f0000000000)=0x20, r2, &(0x7f0000000040), 0x8, 0x2) [ 256.389193] binder: 15980:15990 ioctl 40046207 0 returned -16 [ 256.407282] binder: 15980:15993 BC_ACQUIRE_DONE u0000000000000000 no match [ 256.413194] binder: BINDER_SET_CONTEXT_MGR already set 16:39:15 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x5000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:15 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') membarrier(0x3, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:15 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000005c0)="82780000260f017731f3d87e0b0f20e06635000020000f22e066b9800000c00f326635002000000f30640f02d766b8008000000f23d80f21f86635400000f00f23f8db13b85f078ee82e0f01cf"}], 0xaaaaaaaaaaaac60, 0x0, &(0x7f0000000100), 0x330) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'veth0_to_bridge\x00', 0x0}) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000040)={0x9, 0x1, 0x7fffffff, 0x7, 0x8}, 0xc) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x200, 0x0) ioctl$RNDGETENTCNT(r3, 0x80045200, &(0x7f00000001c0)) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=@setlink={0x28, 0x13, 0xf2f, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_OPERSTATE={0x8, 0x4}]}, 0x28}, 0x1}, 0x0) [ 256.438089] binder: 15980:15990 ioctl 40046207 0 returned -16 16:39:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 256.640639] binder: 16017:16023 IncRefs 0 refcount change on invalid ref 83886080 ret -22 [ 256.649226] binder: 16017:16023 BC_ACQUIRE_DONE node 1009 has no pending acquire request [ 256.673702] veth0_to_bridge: Invalid MTU 251658240 requested, hw max 65535 [ 256.687224] binder: BINDER_SET_CONTEXT_MGR already set [ 256.696401] binder: 16017:16023 ioctl 40046207 0 returned -16 [ 256.709231] veth0_to_bridge: Invalid MTU 251658240 requested, hw max 65535 [ 256.715500] binder: 16017:16029 IncRefs 0 refcount change on invalid ref 83886080 ret -22 [ 256.724776] binder: 16017:16029 BC_ACQUIRE_DONE u0000000000000000 no match [ 256.725363] binder: BINDER_SET_CONTEXT_MGR already set [ 256.737949] binder: 16017:16023 ioctl 40046207 0 returned -16 16:39:16 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x4000000000000000, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:16 executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xd1, &(0x7f0000000000)={{0x5f5e0ff, 0x0, 0x0, @dev={0xfe, 0x80}}, {0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}}, 0x4) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uinput\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f00000000c0)=0x5, 0x4) 16:39:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0xffffffff00000000, @rand_addr}, 0x10) 16:39:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r2, 0x4020ae76, &(0x7f00000000c0)={r3}) write$eventfd(r3, &(0x7f0000000040), 0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000002c0)={0x0, 0x1000, "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"}, &(0x7f0000000000)=0x1008) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r4, 0x100000000}, &(0x7f0000000100)=0x8) r5 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x100000001, 0x4500) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r5, 0xc0a85352, &(0x7f00000001c0)={{0x4, 0x100000001}, 'port1\x00', 0x50, 0x20000, 0x83a, 0x3, 0x4, 0x6, 0x4267, 0x0, 0x2, 0xc3c}) 16:39:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0xfdfdffff}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:16 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ffffffffffffd, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c6820283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1000000000000", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x2, 0x2, &(0x7f0000000740)) 16:39:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:16 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(0xffffffffffffffff, 0x801c581f, &(0x7f0000000000)) [ 257.249751] binder: 16050:16057 IncRefs 0 refcount change on invalid ref -33685505 ret -22 [ 257.258284] binder: 16050:16057 BC_ACQUIRE_DONE node 1013 has no pending acquire request 16:39:16 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x1100000000000000, @rand_addr}, 0x10) 16:39:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:16 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000040)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x10001, 0x0, 0x3, 0x6, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000140)={r1, 0x6, 0x1}, 0x8) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x80247008, &(0x7f0000000080)) [ 257.321151] binder: BINDER_SET_CONTEXT_MGR already set 16:39:16 executing program 5: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)="5e99ea37d93b3623") writev(r1, &(0x7f0000001480)=[{&(0x7f0000001380)="b7", 0x1}], 0x1) 16:39:16 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = dup2(r0, r0) sendmsg$kcm(r1, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:16 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x246e0100}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 257.344290] binder: 16050:16057 ioctl 40046207 0 returned -16 [ 257.358141] binder: BINDER_SET_CONTEXT_MGR already set [ 257.363918] binder: 16050:16069 IncRefs 0 refcount change on invalid ref -33685505 ret -22 [ 257.364512] binder: 16050:16057 ioctl 40046207 0 returned -16 [ 257.372485] binder: 16050:16069 BC_ACQUIRE_DONE u0000000000000000 no match 16:39:17 executing program 7 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) [ 257.607346] binder: 16091:16096 IncRefs 0 refcount change on invalid ref 611188992 ret -22 [ 257.615934] binder: 16091:16096 BC_ACQUIRE_DONE node 1017 has no pending acquire request [ 257.643444] binder: BINDER_SET_CONTEXT_MGR already set [ 257.649598] binder: 16091:16096 ioctl 40046207 0 returned -16 [ 257.659172] binder: 16091:16098 IncRefs 0 refcount change on invalid ref 611188992 ret -22 [ 257.666198] binder: BINDER_SET_CONTEXT_MGR already set [ 257.667939] binder: 16091:16098 BC_ACQUIRE_DONE u0000000000000000 no match [ 257.673928] binder: 16091:16096 ioctl 40046207 0 returned -16 [ 257.842840] FAULT_INJECTION: forcing a failure. [ 257.842840] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.855137] CPU: 0 PID: 16109 Comm: syz-executor7 Not tainted 4.18.0-rc4+ #139 [ 257.862512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.872823] Call Trace: [ 257.875413] dump_stack+0x1c9/0x2b4 [ 257.879049] ? dump_stack_print_info.cold.2+0x52/0x52 [ 257.884255] ? __radix_tree_lookup+0x3dd/0x6e0 [ 257.888842] should_fail.cold.4+0xa/0x1a [ 257.892907] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.898033] ? graph_lock+0x170/0x170 [ 257.901850] ? find_held_lock+0x36/0x1c0 [ 257.905935] ? find_held_lock+0x36/0x1c0 [ 257.910004] ? __lock_is_held+0xb5/0x140 [ 257.914092] ? check_same_owner+0x340/0x340 [ 257.918410] ? rcu_note_context_switch+0x730/0x730 [ 257.923342] __alloc_pages_nodemask+0x36e/0xdb0 [ 257.928885] ? __alloc_pages_slowpath+0x2d90/0x2d90 [ 257.933911] ? rb_next+0x140/0x140 [ 257.937480] ? __lock_acquire+0x7fc/0x5020 [ 257.941723] ? trace_hardirqs_on+0x10/0x10 [ 257.945955] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 257.951493] alloc_pages_vma+0xdd/0x540 [ 257.955483] shmem_alloc_page+0xa8/0x190 [ 257.959544] ? shmem_swapin+0x230/0x230 [ 257.963507] ? attach_entity_load_avg+0x860/0x860 [ 257.968374] ? rbt_memtype_check_insert.cold.8+0x20a/0x20a [ 257.974015] shmem_alloc_and_acct_page+0x1f1/0x820 [ 257.978965] ? shmem_alloc_hugepage+0x4e0/0x4e0 [ 257.983641] ? print_usage_bug+0xc0/0xc0 [ 257.987710] ? print_usage_bug+0xc0/0xc0 [ 257.991763] ? print_usage_bug+0xc0/0xc0 [ 257.995821] shmem_getpage_gfp+0x6ea/0x41e0 [ 258.000163] ? shmem_writepage+0x1380/0x1380 [ 258.004573] ? print_usage_bug+0xc0/0xc0 [ 258.008633] ? __lock_acquire+0x7fc/0x5020 [ 258.012887] ? check_noncircular+0x20/0x20 [ 258.017135] ? print_usage_bug+0xc0/0xc0 [ 258.021204] ? __lock_acquire+0x7fc/0x5020 [ 258.025440] ? print_usage_bug+0xc0/0xc0 [ 258.029495] ? print_usage_bug+0xc0/0xc0 [ 258.033563] ? __lock_acquire+0x7fc/0x5020 [ 258.037793] ? print_usage_bug+0xc0/0xc0 [ 258.042195] ? print_usage_bug+0xc0/0xc0 [ 258.046258] ? graph_lock+0x170/0x170 [ 258.050060] ? print_usage_bug+0xc0/0xc0 [ 258.054115] ? print_usage_bug+0xc0/0xc0 [ 258.058164] ? check_noncircular+0x20/0x20 [ 258.062392] ? print_usage_bug+0xc0/0xc0 [ 258.066447] ? __lock_acquire+0x7fc/0x5020 [ 258.070674] ? __lock_acquire+0x7fc/0x5020 [ 258.074911] ? __lock_acquire+0x7fc/0x5020 [ 258.079147] ? print_usage_bug+0xc0/0xc0 [ 258.083203] ? __lock_acquire+0x7fc/0x5020 [ 258.087433] ? trace_hardirqs_on+0x10/0x10 [ 258.091665] ? print_usage_bug+0xc0/0xc0 [ 258.095737] ? print_usage_bug+0xc0/0xc0 [ 258.099797] ? kmem_cache_alloc+0x12e/0x760 [ 258.104115] ? __d_alloc+0xc8/0xd50 [ 258.107731] ? d_alloc+0x96/0x380 [ 258.111189] ? print_usage_bug+0xc0/0xc0 [ 258.115252] ? graph_lock+0x170/0x170 [ 258.119074] ? print_usage_bug+0xc0/0xc0 [ 258.123149] ? __lock_acquire+0x7fc/0x5020 [ 258.127385] ? graph_lock+0x170/0x170 [ 258.131184] shmem_fault+0x265/0x960 [ 258.134902] ? shmem_read_mapping_page_gfp+0x1f0/0x1f0 [ 258.140171] ? print_usage_bug+0xc0/0xc0 [ 258.144233] ? check_noncircular+0x20/0x20 [ 258.148489] ? lock_downgrade+0x8f0/0x8f0 [ 258.152637] __do_fault+0xee/0x450 [ 258.156184] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 258.161493] ? pmd_val+0x88/0x100 [ 258.164962] ? add_mm_counter_fast+0xd0/0xd0 [ 258.169578] ? add_mm_counter_fast+0xd0/0xd0 [ 258.173996] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 258.179545] __handle_mm_fault+0x2aae/0x4460 [ 258.184107] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 258.188958] ? graph_lock+0x170/0x170 [ 258.192763] ? __lock_acquire+0x7fc/0x5020 [ 258.197017] ? lock_downgrade+0x8f0/0x8f0 [ 258.201178] ? kasan_check_read+0x11/0x20 [ 258.205336] ? rcu_is_watching+0x8c/0x150 [ 258.209488] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 258.213906] ? handle_mm_fault+0x8c4/0xc80 [ 258.218157] handle_mm_fault+0x53e/0xc80 [ 258.222245] ? __handle_mm_fault+0x4460/0x4460 [ 258.226837] ? find_vma+0x34/0x190 [ 258.230404] __do_page_fault+0x620/0xe50 [ 258.234489] ? mm_fault_error+0x380/0x380 [ 258.238647] ? graph_lock+0x170/0x170 [ 258.242460] do_page_fault+0xf6/0x8c0 [ 258.246269] ? vmalloc_sync_all+0x30/0x30 [ 258.250424] ? find_held_lock+0x36/0x1c0 [ 258.254484] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.259323] page_fault+0x1e/0x30 [ 258.262776] RIP: 0010:copy_user_generic_unrolled+0x89/0xc0 [ 258.268403] Code: 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 4c 8b 06 <4c> 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 89 d1 8a [ 258.287629] RSP: 0018:ffff88019acef7d0 EFLAGS: 00010207 [ 258.293004] RAX: 0000000000000004 RBX: 000000000000001c RCX: 0000000000000003 [ 258.300284] RDX: 0000000000000004 RSI: ffff88019acefb40 RDI: 0000000020000000 [ 258.307566] RBP: ffff88019acef808 R08: 00000000000000d8 R09: ffffed003359df68 [ 258.314857] R10: ffffed003359df6b R11: 0000000000000003 R12: 000000002000001c [ 258.322148] R13: 0000000020000000 R14: ffff88019acefb40 R15: 00007ffffffff000 [ 258.329474] ? _copy_to_user+0xf6/0x110 [ 258.333471] ext4_ioctl+0x3e7/0x4210 [ 258.337200] ? find_held_lock+0x36/0x1c0 [ 258.341274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 258.346828] ? ext4_ioctl_group_add+0x560/0x560 [ 258.351511] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 258.357058] ? _kstrtoull+0x188/0x250 [ 258.360875] ? _parse_integer+0x190/0x190 [ 258.365032] ? graph_lock+0x170/0x170 [ 258.368841] ? lock_release+0xa30/0xa30 [ 258.372823] ? find_held_lock+0x36/0x1c0 [ 258.376898] ? find_held_lock+0x36/0x1c0 [ 258.380978] ? lock_downgrade+0x8f0/0x8f0 [ 258.385140] ? kasan_check_read+0x11/0x20 [ 258.389296] ? rcu_is_watching+0x8c/0x150 16:39:17 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x37dc12502000000, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:17 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x1000000, @rand_addr}, 0x10) 16:39:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00003b9fdc)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r1, 0xffffffffffffffff) 16:39:17 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='`\x00\x00', 0x2) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x6}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000080)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x8000, 0xff, 0x4, 0x355f, 0x100000001, 0x80000001, 0xff, {r2, @in={{0x2, 0x4e23, @rand_addr=0x1}}, 0x100000001, 0x9, 0xd0b, 0x5, 0x1}}, &(0x7f0000000240)=0xb0) 16:39:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockname(r0, &(0x7f0000000540)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast2}}}, &(0x7f00000005c0)=0x80) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000600)="8a593a4e31e324fda9393f905cb9900df5fb687c7dea", 0x16) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, {}, 0x0, 0x3}, 0xe) 16:39:17 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x300}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:17 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x800000000, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000002c0)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast1}}, &(0x7f00000003c0)=0xe8) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000440), 0x10) sendto$packet(r0, &(0x7f0000000180)="751e714cb1ad9d79928707991d3b79ad70d537a6184be6b2c9f32fafd3afe602", 0x20, 0x40801, &(0x7f0000000400)={0x11, 0xff, r2, 0x1, 0x1b0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) prctl$setendian(0x14, 0x2) socketpair(0x0, 0x1, 0x40000000000, &(0x7f0000000740)) [ 258.393458] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 258.397883] ? __fget+0x414/0x670 [ 258.401353] ? expand_files.part.8+0x9c0/0x9c0 [ 258.405946] ? kasan_check_write+0x14/0x20 [ 258.410193] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 258.415139] ? ext4_ioctl_group_add+0x560/0x560 [ 258.419832] do_vfs_ioctl+0x1de/0x1720 [ 258.423758] ? __lock_is_held+0xb5/0x140 [ 258.427835] ? ioctl_preallocate+0x300/0x300 [ 258.432251] ? __fget_light+0x2f7/0x440 [ 258.436240] ? fget_raw+0x20/0x20 [ 258.439700] ? __sb_end_write+0xac/0xe0 [ 258.443694] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 258.449284] ? fput+0x130/0x1a0 [ 258.452586] ? ksys_write+0x1ae/0x260 [ 258.456401] ? security_file_ioctl+0x94/0xc0 [ 258.460842] ksys_ioctl+0xa9/0xd0 [ 258.464315] __x64_sys_ioctl+0x73/0xb0 [ 258.468214] do_syscall_64+0x1b9/0x820 [ 258.472100] ? finish_task_switch+0x1d3/0x870 [ 258.476610] ? syscall_return_slowpath+0x5e0/0x5e0 [ 258.481543] ? syscall_return_slowpath+0x31d/0x5e0 [ 258.486479] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 258.491854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 258.496694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 258.501893] RIP: 0033:0x455e29 [ 258.505079] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 258.524393] RSP: 002b:00007f44ab937c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.532114] RAX: ffffffffffffffda RBX: 00007f44ab9386d4 RCX: 0000000000455e29 [ 258.539487] RDX: 0000000020000000 RSI: 00000000801c581f RDI: 0000000000000014 [ 258.546755] RBP: 000000000072bea0 R08: 0000000000000000 R09: 0000000000000000 [ 258.554032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000015 [ 258.561304] R13: 00000000004be9fe R14: 00000000004cd4d8 R15: 0000000000000000 16:39:18 executing program 7 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000240)) r2 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r2, r1) 16:39:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x5580, @rand_addr}, 0x10) 16:39:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000100)={0x4, 0x0, [{0xbff, 0x0, 0x6}, {0x40000093, 0x0, 0x3}, {0x843, 0x0, 0x5d9}, {0x48f, 0x0, 0x8}]}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x2ed) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000080)={[], 0x0, 0x40}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:39:18 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000040)="8100756994094bd7f1586f") r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rtc0\x00', 0x101000, 0x0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000140)=0x2) write$binfmt_script(r0, &(0x7f0000000080)={'#! ', './file0', [{0x20}, {0x20, '/dev/mixer\x00'}], 0xa, "a397b34f23d400bf11b3ce7650bfc98d2eaf8659c9874984c6e4812293e38219924faf8cd743145268f711c7add9f52f2f289ba560d9e3749efbcee93820739ea08c4bb5a1d337adfb398c8d6a635c019bbca0e2f35faa87452c"}, 0x72) fallocate(r0, 0x2, 0xfffffffffffff9d2, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80000, 0x0) connect$bt_sco(r2, &(0x7f0000000180)={0x1f, {0x2, 0x0, 0x3, 0x8001, 0x6}}, 0x8) [ 258.640256] binder: BINDER_SET_CONTEXT_MGR already set [ 258.646192] binder: 16116:16120 ioctl 40046207 0 returned -16 [ 258.652926] binder: 16116:16120 IncRefs 0 refcount change on invalid ref 768 ret -22 [ 258.661126] binder: 16116:16120 BC_ACQUIRE_DONE u0000000000000000 no match [ 258.678739] binder: 16116:16126 IncRefs 0 refcount change on invalid ref 768 ret -22 16:39:18 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x7400}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) [ 258.686811] binder: 16116:16126 BC_ACQUIRE_DONE node 1023 has no pending acquire request 16:39:18 executing program 1: r0 = perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') fcntl$getownex(r0, 0x10, &(0x7f0000000340)={0x0, 0x0}) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x7, 0x7, 0x8, 0x1c0000, 0x0, 0xfff, 0x201, 0x2, 0x8, 0x7, 0x285c, 0x80000001, 0xd455, 0x1, 0x1, 0x1, 0x40, 0x1, 0x9, 0x0, 0x5, 0x3, 0x5c, 0x7, 0x0, 0x40, 0x1f, 0x1, 0x401, 0xffffffffffffff48, 0x7, 0x691, 0x2, 0x6a, 0x9, 0x100000001, 0x0, 0x80000000, 0x4, @perf_bp={&(0x7f0000000180), 0x8}, 0x4010, 0x5, 0xff, 0x6, 0x7f, 0x7754, 0x1}, r2, 0x8, r0, 0xa) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x9c, r3, 0x28, 0x70bd2d, 0x25dfdbfe, {0xd}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9d2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xd822}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x4b}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x8000}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x6}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x40}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}]}]}, 0x9c}, 0x1}, 0x4008000) mprotect(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x2000000) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 258.934563] ALSA: seq fatal error: cannot create timer (-22) 16:39:18 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x801c581f, &(0x7f0000000000)) 16:39:18 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x8, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000000000050000000000000000000000000000009500000000000000bace80c1ba6b302870c0db8feb5f963086144dd207dde238ccdf4db231a0e8c024f47b4ebeb503c052f573a96c1badff371d84dd5e6a181345c6e4db25d3a4dce66944777f97dd5a5cd5dd4c9a1d28236c6b605a122eb317376d06b9dc1e80e1ee3f6d725e930207"], &(0x7f00000004c0)="73797a6b584e3e2f9afed6d0ee3d5d5de2f791e4545b69c564e359a02949ab535c1b25caa665b968d2f1a32e3febe4189befa5f044722bae83e5b6959e392e8d24e41b4ce153c97b5a23e135e38d3b1d14ad7a9eeb7069347fee053569544f1a0000000000000000", 0x0, 0x466, &(0x7f00000003c0)=""/187}, 0x1f) [ 258.974910] binder: 16158:16162 IncRefs 0 refcount change on invalid ref 29696 ret -22 [ 258.983106] binder: 16158:16162 BC_ACQUIRE_DONE node 1026 has no pending acquire request [ 259.038527] binder: BINDER_SET_CONTEXT_MGR already set [ 259.048701] binder: 16158:16162 ioctl 40046207 0 returned -16 [ 259.057924] binder: 16158:16166 IncRefs 0 refcount change on invalid ref 29696 ret -22 [ 259.066165] binder: 16158:16166 BC_ACQUIRE_DONE u0000000000000000 no match [ 259.070242] binder: BINDER_SET_CONTEXT_MGR already set [ 259.079137] binder: 16158:16162 ioctl 40046207 0 returned -16 16:39:19 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x6400, 0x0) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000140)) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x167, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000015c0)={&(0x7f0000000040)=@pppol2tpin6, 0x80, &(0x7f0000000000)=[{&(0x7f0000002600)=""/4096, 0x1000}], 0x1, &(0x7f0000001580)=""/32, 0xfffffffffffffeab}, 0x0) 16:39:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x2, @rand_addr}, 0x10) 16:39:19 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0xfcfdffff, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:19 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r1, r0) 16:39:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x2000000}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$intptr(0x2e, 0x78) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000180)={0x0, 0x6a85}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000300)={0x0, 0x8000, 0x8001, 0x3, r2}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000340)='/dev/net/tun\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) 16:39:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x6609, &(0x7f0000000000)) 16:39:19 executing program 5: r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xfffffffffffffffa) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x22242, 0x0) write$eventfd(r1, &(0x7f0000000080)=0xff, 0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000140)={0xfd2a, 0x401, 0x820f, 0x47, 0x1, 0xffffffffffffffe1, 0x101, 0xcf, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000001c0)={r2, 0x101}, 0x8) shutdown(r1, 0x1) sendmsg$inet_sctp(r0, &(0x7f00000019c0)={&(0x7f0000000540)=@in={0x2, 0x0, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10, &(0x7f0000001580), 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000008400081005000000ffff000000000000fb1f61c6fc11b0dd123247265ec778f3df71aae4d3ffc9c21ec785df89b0f8cbf193ab13c5156c360d03db0442a58ba9794a687826329840bb1d9f"], 0x18}, 0x0) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000200)=r1) [ 259.903695] ALSA: seq fatal error: cannot create timer (-22) [ 259.911856] binder: 16192:16200 IncRefs 0 refcount change on invalid ref 33554432 ret -22 [ 259.920511] binder: 16192:16200 BC_ACQUIRE_DONE node 1030 has no pending acquire request [ 259.947640] binder: BINDER_SET_CONTEXT_MGR already set 16:39:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x11000000, @rand_addr}, 0x10) 16:39:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x541b, &(0x7f0000000000)) 16:39:19 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r1, r0) 16:39:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x4, 0x4, 0x4, 0x1}, 0x2c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) bind$bt_sco(r2, &(0x7f0000000280)={0x1f, {0x200, 0x6, 0x401, 0x4, 0xffffffff, 0x200}}, 0x8) io_setup(0x9, &(0x7f0000000100)=0x0) r4 = eventfd2(0x0, 0x0) io_submit(r3, 0x2, &(0x7f0000000580)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xfff, r4, &(0x7f0000000340), 0x0, 0x0, 0x0, 0xfffffffffffffffe}]) r5 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x10000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000001c0)=0xe8) setsockopt$packet_add_memb(r5, 0x107, 0x1, &(0x7f0000000200)={r6, 0x1, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1c}}, 0x10) socket$l2tp(0x18, 0x1, 0x1) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000028000)={r0, &(0x7f0000000440)="e6090fa193b601d12769ef45dc06786cb16ffffcde5929bcf24785be56f2baba6a6183dd4420f1356343b0407b59af878cd25e225d8ef3ae11f95612fab9bdb0dfa42f6816d4ef558513bb61a5099c50736ceb9846441a48a5232d47aa13026c083681d2c9c94f8fdff19f7fe71477b31a542f80ed95f4349736ef1081032a0fbf19147049c8f74399e4d452d4395cc6b345bae378d64473a239a8181dee15b8ef77d6d7c21c5696220d9a55f0aa0382f455f4da0a", &(0x7f0000000300)='\x00'}, 0x20) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r7, 0x7704, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r7, 0x84, 0x4, &(0x7f00000000c0), &(0x7f0000000140)=0x4) clock_gettime(0xffffffffffffffff, &(0x7f0000000100)) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r7, 0x28, 0x6, &(0x7f0000000080)={0x77359400}, 0x10) [ 259.971412] binder: 16192:16200 ioctl 40046207 0 returned -16 [ 259.995704] binder: 16192:16204 IncRefs 0 refcount change on invalid ref 33554432 ret -22 [ 260.004362] binder: 16192:16204 BC_ACQUIRE_DONE u0000000000000000 no match [ 260.015950] binder: BINDER_SET_CONTEXT_MGR already set 16:39:19 executing program 3: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x270100, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000080)={{0x3, 0x2, 0x517, 0x1, 0x8}, 0x3, 0xce2, 'id1\x00', 'timer0\x00', 0x0, 0x0, 0x100, 0x3, 0x139}) r1 = socket$inet(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) ioctl(r2, 0x4000008912, &(0x7f0000000000)="295ee1311f16f477671070") getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000001c0)=@assoc_value={0x0}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000240)={r3, 0x1000}, &(0x7f0000000280)=0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6}]}, 0x10) sendmsg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000300)="240000005e0007031dffc76e286b38a0fd946fa2830020c60a0009000300001d85680c1ba3a20400ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0a4be3966cf055d90f15a3d7bd950dd52c0c49caf5a278975670cef4bade8c5f8b4fb945f7764262503c6277b7a1d16d2fc02cc8f626326ecd4b9c06d8bc0adb3f2c78b037afb6bb65ce615c6383810000000000000091fb3b9c71f2f14187e6c307c951f83210f87baa7365b1f51c38bbcb7134bbc72510", 0x23e}], 0x1}, 0x20040000) 16:39:19 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x5}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:19 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000300)={0x0, 0x8}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000380)={r2, 0x5, 0x7, 0x1}, 0x10) [ 260.021598] binder: 16192:16200 ioctl 40046207 0 returned -16 [ 260.173963] ALSA: seq fatal error: cannot create timer (-22) [ 260.219010] binder: BINDER_SET_CONTEXT_MGR already set 16:39:19 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x2000000, @rand_addr}, 0x10) 16:39:19 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x40049409, &(0x7f0000000000)) 16:39:19 executing program 6: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r1, r0) [ 260.239687] binder: 16225:16237 ioctl 40046207 0 returned -16 [ 260.267524] binder: 16225:16237 IncRefs 0 refcount change on invalid ref 5 ret -22 [ 260.275453] binder: 16225:16237 BC_ACQUIRE_DONE u0000000000000000 no match [ 260.299872] binder: 16225:16242 IncRefs 0 refcount change on invalid ref 5 ret -22 [ 260.307906] binder: 16225:16242 BC_ACQUIRE_DONE node 1036 has no pending acquire request [ 260.451615] ALSA: seq fatal error: cannot create timer (-22) 16:39:20 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x2, 0x0, 0x0, [], 0x0, &(0x7f00000000c0)}, 0x78) getgroups(0x3, &(0x7f0000000000)=[0xee00, 0x0, 0xee01]) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer2\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_TEST_UNIT_READY(r4, 0x2) r5 = getgid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) fstat(r0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000340)=[r1, r2, r3, r5, r6, r7]) getsockname$packet(r4, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f0000000500)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x8, &(0x7f00000003c0)=@raw=[@jmp={0x5, 0x6, 0xd, 0xf, 0x2, 0x130, 0xffffffffffffffff}, @map={0x18, 0x3, 0x1, 0x0, r4}, @exit={0x95}, @alu={0x7, 0x0, 0x8, 0x0, 0x1, 0xffffffffffffffc0, 0xfffffffffffffff0}], &(0x7f0000000400)='GPL\x00', 0x40, 0x78, &(0x7f0000000440)=""/120, 0x41f00, 0x1, [], r8}, 0x48) 16:39:20 executing program 0: clock_nanosleep(0x2, 0x0, &(0x7f0000000000)={0x0, 0x989680}, 0x0) clock_nanosleep(0x80000000002, 0x40000000, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) 16:39:20 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000ff4)='/dev/ashmem\x00', 0x0, 0x0) mlockall(0x1) mmap(&(0x7f0000447000/0x4000)=nil, 0x4000, 0x0, 0x13, r0, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x80000004}) readv(r1, &(0x7f00000f9000)=[{&(0x7f0000242000)=""/2560, 0xa00}], 0x26c) readv(r1, &(0x7f0000f5c000)=[{&(0x7f000079f000)=""/91, 0x5b}], 0x1) setsockopt$inet_dccp_int(r1, 0x21, 0x11, &(0x7f0000000080)=0x5f701799, 0x4) 16:39:20 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0xa0000, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000300)='ip6_vti0\x00') perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000180)={0x8000}, 0x4) 16:39:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x7a}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:20 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r1, r0) 16:39:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x40020000, @rand_addr}, 0x10) 16:39:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0x4020940d, &(0x7f0000000000)) [ 261.100076] binder: 16272:16278 IncRefs 0 refcount change on invalid ref 122 ret -22 [ 261.108293] binder: 16272:16278 BC_ACQUIRE_DONE node 1039 has no pending acquire request [ 261.126361] binder: BINDER_SET_CONTEXT_MGR already set 16:39:20 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r1, r0) [ 261.148625] binder: 16272:16278 ioctl 40046207 0 returned -16 16:39:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x1000002, 0x31, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000001480)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75c01f0200f58d26d7a071fb35331ce39c5aeeff5083cf07dd46455c914d4aff1e7cf7ed57c0c2056f5ca933f03cbf82bd13534737339245d31b0041be6281d7e1b4b7099114c571872298dd7f2120e2b6fa2a2e2a2c9c6e0034750b7961fa2c1584c0b5a500ae0ac39bc76a78d9158266759f766a3e8c84c09cf35a214a200421dcbc4cb6ee55476d8ead8882947ffa1fb4c050727beb12c57e06ff59") ioctl$SG_GET_NUM_WAITING(r1, 0xc0045877, &(0x7f0000000000)) 16:39:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x11, @rand_addr}, 0x10) 16:39:20 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000100)="025cc83d6d345f8f762070") r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180)='/dev/net/tun\x00', 0x40000000000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={"00ac730000000000ec973f820f7c4000", 0x102}) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000000)={'ip6_vti0\x00', 0x400}) fremovexattr(r1, &(0x7f0000000040)=@random={'trusted.', '/dev/net/tun\x00'}) dup3(r0, r1, 0x0) 16:39:20 executing program 1: perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x19c}, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000080)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x80, &(0x7f0000000280)=[{&(0x7f00000002c0)="f810f7b35a9f0bcfb881fcaeb47dd2de658a7ea5089a23627b34caf4129731c682b8ca19366a630283c2b041ce69d652a33d1cd9a9b832d7cee9ebdb0b8edf5fcc96bd0925369fae8e506aabc60d209db86ef69fa60ecde1069deb9a49cb05b4c1", 0x61}, {&(0x7f00000001c0)="46d2450b1fa37c00679d3bc48ef8b5d7e3c83a0324f974e91c24891f06472848ddb9e6dad0e38eca58b6e584ba933b7d295ec6aecf27a89be87ac99bf07e42a53be41f5a4117abb5fda9a0ef32ff577a777e3a82e8a34102816cae3c06d3a958d0dde9826928f57c16fddf8b6f87ef1bc1091e5b072dca3ddbb3f5d9fa835e48c072c7115170da0a24822c34d32b3606c44d16e2b6994a0074e3f03d4c3244e2e22ff9d550398d8d527debdc357e00113476c81a7244945fd43c51", 0xbb}], 0x2, &(0x7f0000000200), 0x0, 0x8000}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000580)='ip6_vti0\x00') ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000180)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000740)) [ 261.171374] binder: 16272:16286 IncRefs 0 refcount change on invalid ref 122 ret -22 [ 261.179448] binder: 16272:16286 BC_ACQUIRE_DONE u0000000000000000 no match [ 261.197516] binder: BINDER_SET_CONTEXT_MGR already set [ 261.209712] binder: 16272:16278 ioctl 40046207 0 returned -16 16:39:20 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000008ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) r2 = syz_open_dev$binder(&(0x7f000000fff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000007000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire={0x40046305}], 0x0, 0x0, &(0x7f0000002000)}) r3 = dup2(r2, r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000002c0)={0x1c, 0x0, &(0x7f00000000c0)=[@release={0x40046304, 0x16e24}, @acquire_done={0x40106309}], 0x0, 0x0, &(0x7f0000000300)}) 16:39:20 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r1, &(0x7f0000deb000)={0x2, 0x4e23, @broadcast=0xffffffff}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0x0, 0x20000802, &(0x7f0000000000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000280)='tunl0\x00', 0x10) sendto$inet(r1, &(0x7f00000000c0)='c', 0x1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000003c0), 0x53ab, 0x0, &(0x7f00000001c0)={0x2, 0x240, @rand_addr}, 0x10) [ 261.375337] ALSA: seq fatal error: cannot create timer (-22) 16:39:20 executing program 6: ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000240)) r1 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000029fcc)={{0x0, 0x2}}) dup2(r1, r0) [ 431.072370] INFO: task syz-fuzzer:4506 blocked for more than 140 seconds. [ 431.079447] Not tainted 4.18.0-rc4+ #139 [ 431.084064] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.092104] syz-fuzzer D19640 4506 4502 0x00000000 [ 431.097788] Call Trace: [ 431.100428] __schedule+0x87c/0x1ed0 [ 431.104180] ? __sched_text_start+0x8/0x8 [ 431.108384] ? trace_hardirqs_on+0x10/0x10 [ 431.112641] ? graph_lock+0x170/0x170 [ 431.116647] ? __lock_acquire+0x7fc/0x5020 [ 431.120939] schedule+0xfb/0x450 [ 431.124330] ? lock_downgrade+0x8f0/0x8f0 [ 431.128499] ? __schedule+0x1ed0/0x1ed0 [ 431.132492] ? mark_held_locks+0xc9/0x160 [ 431.136654] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.141249] ? _raw_spin_unlock_irq+0x27/0x70 [ 431.145774] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 431.151092] rwsem_down_read_failed+0x362/0x600 [ 431.155786] ? rwsem_down_write_failed_killable+0x10/0x10 [ 431.161448] ? lock_downgrade+0x8f0/0x8f0 [ 431.165640] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 431.170102] call_rwsem_down_read_failed+0x18/0x30 [ 431.175069] __percpu_down_read+0x16e/0x210 [ 431.179411] ? percpu_free_rwsem+0xa0/0xa0 [ 431.183687] __sb_start_write+0x2d7/0x300 [ 431.187859] ext4_page_mkwrite+0x1d0/0x1430 [ 431.192218] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 431.197790] ? find_held_lock+0x36/0x1c0 [ 431.201893] do_page_mkwrite+0x14e/0x520 [ 431.205969] ? print_bad_pte+0x5f0/0x5f0 [ 431.210052] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.214482] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.219096] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 431.223622] do_wp_page+0xf78/0x19b0 [ 431.227371] ? finish_mkwrite_fault+0x610/0x610 [ 431.232081] ? trace_hardirqs_on+0x10/0x10 [ 431.236353] ? ktime_get_coarse_real_ts64+0x288/0x3a0 [ 431.241569] ? graph_lock+0x170/0x170 [ 431.245408] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.250450] ? lock_acquire+0x1e4/0x540 [ 431.254720] ? __handle_mm_fault+0x1cc8/0x4460 [ 431.259428] ? lock_release+0xa30/0xa30 [ 431.263532] ? find_held_lock+0x36/0x1c0 [ 431.267612] ? pmd_val+0x88/0x100 [ 431.271118] ? add_mm_counter_fast+0xd0/0xd0 [ 431.275557] ? kasan_check_write+0x14/0x20 [ 431.279820] ? do_raw_spin_lock+0xc1/0x200 [ 431.284071] __handle_mm_fault+0x2a84/0x4460 [ 431.288504] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 431.293365] ? graph_lock+0x170/0x170 [ 431.297211] ? lock_downgrade+0x8f0/0x8f0 [ 431.301386] ? kasan_check_read+0x11/0x20 [ 431.305561] ? rcu_is_watching+0x8c/0x150 [ 431.309729] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 431.314206] ? handle_mm_fault+0x8c4/0xc80 [ 431.318485] handle_mm_fault+0x53e/0xc80 [ 431.322577] ? __handle_mm_fault+0x4460/0x4460 [ 431.327183] ? find_vma+0x34/0x190 [ 431.330765] __do_page_fault+0x620/0xe50 [ 431.334862] ? mm_fault_error+0x380/0x380 [ 431.339057] ? __ia32_sys_read+0xb0/0xb0 [ 431.343144] do_page_fault+0xf6/0x8c0 [ 431.346978] ? vmalloc_sync_all+0x30/0x30 [ 431.351147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.356729] ? do_syscall_64+0x497/0x820 [ 431.360822] ? syscall_slow_exit_work+0x500/0x500 [ 431.365720] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.370675] ? syscall_return_slowpath+0x31d/0x5e0 [ 431.375632] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 431.381039] ? page_fault+0x8/0x30 [ 431.384628] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.389504] ? page_fault+0x8/0x30 [ 431.393099] page_fault+0x1e/0x30 [ 431.396567] RIP: 0033:0x70b5e1 [ 431.399802] Code: 48 89 6c 24 10 48 8d 6c 24 10 48 8b 44 24 20 48 8b 48 08 48 8b 50 10 48 8d 58 08 48 83 fa 08 0f 8c 1e 01 00 00 48 8b 54 24 28 <88> 11 48 8b 48 08 48 8b 70 10 48 83 fe 01 0f 86 44 01 00 00 48 89 [ 431.419084] RSP: 002b:000000c42d3a8e80 EFLAGS: 00010212 [ 431.424487] RAX: 000000c42d3a91c0 RBX: 000000c42d3a91c8 RCX: 00007fb4b733a000 [ 431.431803] RDX: 0000000000000745 RSI: 0000000000000000 RDI: 00000000000013d0 [ 431.439101] RBP: 000000c42d3a8e90 R08: 0000000000000000 R09: 0000000000000000 [ 431.446409] R10: 000000000095bb32 R11: 0000000000000004 R12: 0000000000000000 [ 431.453691] R13: 0000000000000020 R14: 0000000000000013 R15: 000000c42d3a9338 [ 431.461026] INFO: task syz-fuzzer:4520 blocked for more than 140 seconds. [ 431.467976] Not tainted 4.18.0-rc4+ #139 [ 431.472596] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.480675] syz-fuzzer D19640 4520 4502 0x00000000 [ 431.486333] Call Trace: [ 431.488942] __schedule+0x87c/0x1ed0 [ 431.492705] ? __sched_text_start+0x8/0x8 [ 431.496898] ? trace_hardirqs_on+0x10/0x10 [ 431.501165] ? graph_lock+0x170/0x170 [ 431.505005] ? __lock_acquire+0x7fc/0x5020 [ 431.509280] schedule+0xfb/0x450 [ 431.512682] ? lock_downgrade+0x8f0/0x8f0 [ 431.516858] ? __schedule+0x1ed0/0x1ed0 [ 431.520858] ? mark_held_locks+0xc9/0x160 [ 431.525034] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.529651] ? _raw_spin_unlock_irq+0x27/0x70 [ 431.534174] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 431.539349] rwsem_down_read_failed+0x362/0x600 [ 431.544051] ? rwsem_down_write_failed_killable+0x10/0x10 [ 431.549620] ? lock_downgrade+0x8f0/0x8f0 [ 431.553792] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 431.558246] call_rwsem_down_read_failed+0x18/0x30 [ 431.563243] __percpu_down_read+0x16e/0x210 [ 431.567600] ? percpu_free_rwsem+0xa0/0xa0 [ 431.571859] __sb_start_write+0x2d7/0x300 [ 431.576049] ext4_page_mkwrite+0x1d0/0x1430 [ 431.580390] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 431.585956] ? find_held_lock+0x36/0x1c0 [ 431.590047] do_page_mkwrite+0x14e/0x520 [ 431.594131] ? print_bad_pte+0x5f0/0x5f0 [ 431.598207] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.602640] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.607240] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 431.611774] do_wp_page+0xf78/0x19b0 [ 431.615588] ? finish_mkwrite_fault+0x610/0x610 [ 431.620284] ? trace_hardirqs_on+0x10/0x10 [ 431.624534] ? ktime_get_coarse_real_ts64+0x288/0x3a0 [ 431.629765] ? graph_lock+0x170/0x170 [ 431.633584] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 431.638653] ? lock_acquire+0x1e4/0x540 [ 431.642645] ? __handle_mm_fault+0x1cc8/0x4460 [ 431.647261] ? lock_release+0xa30/0xa30 [ 431.651254] ? find_held_lock+0x36/0x1c0 [ 431.655354] ? pmd_val+0x88/0x100 [ 431.658820] ? add_mm_counter_fast+0xd0/0xd0 [ 431.663273] ? kasan_check_write+0x14/0x20 [ 431.667528] ? do_raw_spin_lock+0xc1/0x200 [ 431.671797] __handle_mm_fault+0x2a84/0x4460 [ 431.676267] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 431.681205] ? graph_lock+0x170/0x170 [ 431.685095] ? lock_downgrade+0x8f0/0x8f0 [ 431.689314] ? kasan_check_read+0x11/0x20 [ 431.693495] ? rcu_is_watching+0x8c/0x150 [ 431.697792] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 431.702224] ? handle_mm_fault+0x8c4/0xc80 [ 431.706470] handle_mm_fault+0x53e/0xc80 [ 431.710553] ? __handle_mm_fault+0x4460/0x4460 [ 431.715158] ? find_vma+0x34/0x190 [ 431.718747] __do_page_fault+0x620/0xe50 [ 431.723043] ? mm_fault_error+0x380/0x380 [ 431.727205] ? __ia32_sys_read+0xb0/0xb0 [ 431.731290] do_page_fault+0xf6/0x8c0 [ 431.735119] ? vmalloc_sync_all+0x30/0x30 [ 431.739281] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 431.744841] ? do_syscall_64+0x497/0x820 [ 431.748936] ? syscall_slow_exit_work+0x500/0x500 [ 431.753787] ? syscall_return_slowpath+0x5e0/0x5e0 [ 431.758737] ? syscall_return_slowpath+0x31d/0x5e0 [ 431.763678] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 431.769065] ? page_fault+0x8/0x30 [ 431.772632] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 431.777506] ? page_fault+0x8/0x30 [ 431.781062] page_fault+0x1e/0x30 [ 431.784543] RIP: 0033:0x70b5e1 [ 431.787741] Code: 48 89 6c 24 10 48 8d 6c 24 10 48 8b 44 24 20 48 8b 48 08 48 8b 50 10 48 8d 58 08 48 83 fa 08 0f 8c 1e 01 00 00 48 8b 54 24 28 <88> 11 48 8b 48 08 48 8b 70 10 48 83 fe 01 0f 86 44 01 00 00 48 89 [ 431.807077] RSP: 002b:000000c42a73ac50 EFLAGS: 00010212 [ 431.812475] RAX: 000000c42a73b288 RBX: 000000c42a73b290 RCX: 00007fb4b4f3a000 [ 431.819779] RDX: fffffffffffffffe RSI: 000000000208a0f8 RDI: 000000c42a73ac60 [ 431.827071] RBP: 000000c42a73ac60 R08: 0000000000000000 R09: 0000000000000000 [ 431.834393] R10: 000000000095bb32 R11: 0000000000000004 R12: 0000000000000000 [ 431.841688] R13: 0000000000000020 R14: 0000000000000013 R15: 000000c42a73b400 [ 431.849044] INFO: task syz-executor4:4533 blocked for more than 140 seconds. [ 431.856263] Not tainted 4.18.0-rc4+ #139 [ 431.860895] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 431.868893] syz-executor4 D17272 4533 4526 0x00000000 [ 431.874574] Call Trace: [ 431.877187] __schedule+0x87c/0x1ed0 [ 431.880948] ? __sched_text_start+0x8/0x8 [ 431.885120] ? graph_lock+0x170/0x170 [ 431.889035] ? __lock_acquire+0x7fc/0x5020 [ 431.893317] schedule+0xfb/0x450 [ 431.896722] ? lock_downgrade+0x8f0/0x8f0 [ 431.900887] ? __schedule+0x1ed0/0x1ed0 [ 431.904896] ? mark_held_locks+0xc9/0x160 [ 431.909064] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 431.913683] ? _raw_spin_unlock_irq+0x27/0x70 [ 431.918204] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 431.923272] rwsem_down_read_failed+0x362/0x600 [ 431.927976] ? rwsem_down_write_failed_killable+0x10/0x10 [ 431.933575] ? lock_downgrade+0x8f0/0x8f0 [ 431.937760] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 431.942207] ? rcuwait_wake_up+0x1cc/0x2f0 [ 431.946458] call_rwsem_down_read_failed+0x18/0x30 [ 431.951447] __percpu_down_read+0x16e/0x210 [ 431.955795] ? percpu_free_rwsem+0xa0/0xa0 [ 431.960067] __sb_start_write+0x2d7/0x300 [ 431.964238] mnt_want_write+0x3f/0xc0 [ 431.968083] do_unlinkat+0x2b7/0xa30 [ 431.972592] ? do_raw_spin_unlock+0xa7/0x2f0 [ 431.977046] ? __ia32_sys_rmdir+0x40/0x40 [ 431.981215] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 431.986784] ? strncpy_from_user+0x3be/0x510 [ 431.991230] ? mpi_free.cold.1+0x19/0x19 [ 431.995326] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.000888] ? getname_flags+0x26e/0x5a0 [ 432.004992] ? do_syscall_64+0x9a/0x820 [ 432.008999] __x64_sys_unlink+0x42/0x50 [ 432.013040] do_syscall_64+0x1b9/0x820 [ 432.016945] ? syscall_slow_exit_work+0x500/0x500 [ 432.021811] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.026771] ? syscall_return_slowpath+0x31d/0x5e0 [ 432.031738] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 432.037116] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.042031] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.047255] RIP: 0033:0x455b77 [ 432.050470] Code: c0 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 8d 7e 20 40 80 10 73 64 48 83 fa 02 7e c2 0f b6 54 0b 01 8d 7a 80 40 80 ff 3f [ 432.069749] RSP: 002b:00007ffcc7ff8128 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 432.077501] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455b77 [ 432.084830] RDX: 00007ffcc7ff8130 RSI: 00007ffcc7ff81c0 RDI: 00007ffcc7ff81c0 [ 432.092132] RBP: 00007ffcc7ff9ed0 R08: 0000000000000000 R09: 0000000000000010 [ 432.099441] R10: 000000000000000a R11: 0000000000000206 R12: 0000000001594940 [ 432.106750] R13: 0000000000000000 R14: 00007ffcc7ff98a0 R15: 0000000000702140 [ 432.114074] INFO: task syz-executor5:4536 blocked for more than 140 seconds. [ 432.121389] Not tainted 4.18.0-rc4+ #139 [ 432.126019] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.134024] syz-executor5 D20472 4536 4528 0x00000000 [ 432.139725] Call Trace: [ 432.142948] __schedule+0x87c/0x1ed0 [ 432.146701] ? __sched_text_start+0x8/0x8 [ 432.150868] ? graph_lock+0x170/0x170 [ 432.154792] ? __lock_acquire+0x7fc/0x5020 [ 432.159051] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 432.164198] schedule+0xfb/0x450 [ 432.167701] ? lock_downgrade+0x8f0/0x8f0 [ 432.171876] ? __schedule+0x1ed0/0x1ed0 [ 432.175968] ? mark_held_locks+0xc9/0x160 [ 432.180141] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.184749] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.189273] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 432.194318] rwsem_down_read_failed+0x362/0x600 [ 432.199028] ? rwsem_down_write_failed_killable+0x10/0x10 [ 432.204584] ? lock_downgrade+0x8f0/0x8f0 [ 432.209135] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 432.213560] ? rcuwait_wake_up+0x1cc/0x2f0 [ 432.217831] call_rwsem_down_read_failed+0x18/0x30 [ 432.222786] __percpu_down_read+0x16e/0x210 [ 432.227180] ? percpu_free_rwsem+0xa0/0xa0 [ 432.231439] __sb_start_write+0x2d7/0x300 [ 432.235614] mnt_want_write+0x3f/0xc0 [ 432.239441] do_unlinkat+0x2b7/0xa30 [ 432.243184] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.247635] ? __ia32_sys_rmdir+0x40/0x40 [ 432.251977] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.258089] ? strncpy_from_user+0x3be/0x510 [ 432.262866] ? mpi_free.cold.1+0x19/0x19 [ 432.266956] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.272527] ? getname_flags+0x26e/0x5a0 [ 432.276601] ? do_syscall_64+0x9a/0x820 [ 432.280611] __x64_sys_unlink+0x42/0x50 [ 432.284597] do_syscall_64+0x1b9/0x820 [ 432.288506] ? syscall_slow_exit_work+0x500/0x500 [ 432.293359] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.298315] ? syscall_return_slowpath+0x31d/0x5e0 [ 432.303267] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 432.308659] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.313520] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.318730] RIP: 0033:0x455b77 [ 432.321922] Code: c0 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 8d 7e 20 40 80 10 73 64 48 83 fa 02 7e c2 0f b6 54 0b 01 8d 7a 80 40 80 ff 3f [ 432.341898] RSP: 002b:00007ffedca6b018 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 432.349641] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455b77 [ 432.356948] RDX: 00007ffedca6b020 RSI: 00007ffedca6b0b0 RDI: 00007ffedca6b0b0 [ 432.364496] RBP: 00007ffedca6cdc0 R08: 0000000000000000 R09: 0000000000000010 [ 432.371969] R10: 000000000000000a R11: 0000000000000206 R12: 0000000000e8b940 [ 432.379259] R13: 0000000000000000 R14: 00007ffedca6c790 R15: 0000000000702140 [ 432.386582] INFO: task syz-executor6:14481 blocked for more than 140 seconds. [ 432.393895] Not tainted 4.18.0-rc4+ #139 [ 432.398501] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.406488] syz-executor6 D22544 14481 14455 0x00000000 [ 432.412146] Call Trace: [ 432.414757] __schedule+0x87c/0x1ed0 [ 432.418498] ? __sched_text_start+0x8/0x8 [ 432.422666] ? graph_lock+0x170/0x170 [ 432.426493] ? __lock_acquire+0x7fc/0x5020 [ 432.430759] schedule+0xfb/0x450 [ 432.434156] ? lock_downgrade+0x8f0/0x8f0 [ 432.438327] ? __schedule+0x1ed0/0x1ed0 [ 432.442330] ? mark_held_locks+0xc9/0x160 [ 432.446603] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.451219] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.455737] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 432.460844] rwsem_down_read_failed+0x362/0x600 [ 432.466201] ? rwsem_down_write_failed_killable+0x10/0x10 [ 432.471785] ? lock_downgrade+0x8f0/0x8f0 [ 432.475952] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 432.480395] ? rcuwait_wake_up+0x1cc/0x2f0 [ 432.484679] call_rwsem_down_read_failed+0x18/0x30 [ 432.489637] __percpu_down_read+0x16e/0x210 [ 432.494037] ? percpu_free_rwsem+0xa0/0xa0 [ 432.498320] __sb_start_write+0x2d7/0x300 [ 432.502501] mnt_want_write+0x3f/0xc0 [ 432.506369] do_unlinkat+0x2b7/0xa30 [ 432.510122] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.514598] ? __ia32_sys_rmdir+0x40/0x40 [ 432.518808] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 432.524383] ? strncpy_from_user+0x3be/0x510 [ 432.528823] ? mpi_free.cold.1+0x19/0x19 [ 432.532935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.538489] ? getname_flags+0x26e/0x5a0 [ 432.542676] ? do_syscall_64+0x9a/0x820 [ 432.546671] __x64_sys_unlink+0x42/0x50 [ 432.551382] do_syscall_64+0x1b9/0x820 [ 432.555287] ? syscall_slow_exit_work+0x500/0x500 [ 432.560176] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.565146] ? syscall_return_slowpath+0x31d/0x5e0 [ 432.570146] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 432.575534] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.580425] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 432.585636] RIP: 0033:0x455b77 [ 432.588848] Code: c0 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 48 83 c4 08 c3 8d 7e 20 40 80 10 73 64 48 83 fa 02 7e c2 0f b6 54 0b 01 8d 7a 80 40 80 ff 3f [ 432.608213] RSP: 002b:00007ffcf184d498 EFLAGS: 00000202 ORIG_RAX: 0000000000000057 [ 432.616120] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000455b77 [ 432.623951] RDX: 00007ffcf184d4a0 RSI: 00007ffcf184d530 RDI: 00007ffcf184d530 [ 432.631255] RBP: 00007ffcf184f240 R08: 0000000000000000 R09: 000000000000000f [ 432.638569] R10: 000000000000000a R11: 0000000000000202 R12: 0000000001054940 [ 432.645857] R13: 0000000000000000 R14: 00007ffcf184ec10 R15: 0000000000702140 [ 432.653188] INFO: task syz-executor0:16290 blocked for more than 140 seconds. [ 432.660467] Not tainted 4.18.0-rc4+ #139 [ 432.665066] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 432.673041] syz-executor0 D24456 16290 4529 0x00000004 [ 432.678705] Call Trace: [ 432.681326] __schedule+0x87c/0x1ed0 [ 432.685095] ? __sched_text_start+0x8/0x8 [ 432.689264] ? trace_hardirqs_on+0x10/0x10 [ 432.693535] ? graph_lock+0x170/0x170 [ 432.697395] ? __lock_acquire+0x7fc/0x5020 [ 432.701682] ? print_usage_bug+0xc0/0xc0 [ 432.705779] schedule+0xfb/0x450 [ 432.709181] ? lock_downgrade+0x8f0/0x8f0 [ 432.713344] ? __schedule+0x1ed0/0x1ed0 [ 432.717345] ? mark_held_locks+0xc9/0x160 [ 432.721611] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.726234] ? _raw_spin_unlock_irq+0x27/0x70 [ 432.730744] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 432.735802] rwsem_down_read_failed+0x362/0x600 [ 432.740614] ? rwsem_down_write_failed_killable+0x10/0x10 [ 432.746206] ? lock_downgrade+0x8f0/0x8f0 [ 432.750378] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 432.754836] call_rwsem_down_read_failed+0x18/0x30 [ 432.760303] __percpu_down_read+0x16e/0x210 [ 432.764650] ? percpu_free_rwsem+0xa0/0xa0 [ 432.768897] __sb_start_write+0x2d7/0x300 [ 432.773105] ext4_page_mkwrite+0x1d0/0x1430 [ 432.777461] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 432.783037] ? find_held_lock+0x36/0x1c0 [ 432.787150] do_page_mkwrite+0x14e/0x520 [ 432.791335] ? print_bad_pte+0x5f0/0x5f0 [ 432.795419] ? do_raw_spin_unlock+0xa7/0x2f0 [ 432.799862] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 432.804453] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 432.808969] do_wp_page+0xf78/0x19b0 [ 432.812699] ? finish_mkwrite_fault+0x610/0x610 [ 432.817412] ? trace_hardirqs_on+0x10/0x10 [ 432.821684] ? __schedule+0x884/0x1ed0 [ 432.825617] ? lock_acquire+0x1e4/0x540 [ 432.829607] ? __handle_mm_fault+0x1cc8/0x4460 [ 432.834219] ? lock_release+0xa30/0xa30 [ 432.838212] ? pmd_val+0x88/0x100 [ 432.841687] ? add_mm_counter_fast+0xd0/0xd0 [ 432.846124] ? kasan_check_write+0x14/0x20 [ 432.850912] ? do_raw_spin_lock+0xc1/0x200 [ 432.855174] __handle_mm_fault+0x2a84/0x4460 [ 432.859611] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 432.865530] ? graph_lock+0x170/0x170 [ 432.869381] ? lock_downgrade+0x8f0/0x8f0 [ 432.873543] ? kasan_check_read+0x11/0x20 [ 432.877708] ? rcu_is_watching+0x8c/0x150 [ 432.881858] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 432.886292] ? handle_mm_fault+0x8c4/0xc80 [ 432.890542] handle_mm_fault+0x53e/0xc80 [ 432.894652] ? __handle_mm_fault+0x4460/0x4460 [ 432.899246] ? find_vma+0x34/0x190 [ 432.902820] __do_page_fault+0x620/0xe50 [ 432.906905] ? clock_was_set_work+0x30/0x30 [ 432.911259] ? mm_fault_error+0x380/0x380 [ 432.915419] ? __x64_sys_nanosleep+0x1f8/0x280 [ 432.920039] ? hrtimer_nanosleep+0x620/0x620 [ 432.924464] do_page_fault+0xf6/0x8c0 [ 432.928289] ? vmalloc_sync_all+0x30/0x30 [ 432.932453] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 432.938784] ? do_syscall_64+0x497/0x820 [ 432.942865] ? syscall_return_slowpath+0x5e0/0x5e0 [ 432.947829] ? syscall_return_slowpath+0x31d/0x5e0 [ 432.952774] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 432.958155] ? page_fault+0x8/0x30 [ 432.961713] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 432.966574] ? page_fault+0x8/0x30 [ 432.970131] page_fault+0x1e/0x30 [ 432.973600] RIP: 0033:0x4084b0 [ 432.976804] Code: 24 1f e9 d2 00 00 00 48 ff c2 48 83 fa 08 0f 83 ad 00 00 00 84 01 0f b6 1c 11 38 d8 75 e9 48 89 54 24 20 48 8b 5c 24 48 0f b6 <73> 50 48 0f af f2 0f b6 5b 51 48 89 cf 48 8d 74 3e 08 84 db 74 7c [ 432.996082] RSP: 002b:00007ffc6fbcaeb0 EFLAGS: 00010283 [ 433.001482] RAX: 0000001b2e520004 RBX: 0000000000000000 RCX: 0000001b2f520000 [ 433.008807] RDX: 0000001b2e520008 RSI: 00000000007300d0 RDI: 0000000000000000 [ 433.016113] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.023423] R10: 00007ffc6fbcaef0 R11: 0000000000000000 R12: 0000000000000000 [ 433.030720] R13: 0000000000000002 R14: 000000000072bea0 R15: 000000000072bea0 [ 433.038084] INFO: task syz-executor3:16298 blocked for more than 140 seconds. [ 433.045376] Not tainted 4.18.0-rc4+ #139 [ 433.050418] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.058396] syz-executor3 D23048 16298 4535 0x00000004 [ 433.064060] Call Trace: [ 433.066661] __schedule+0x87c/0x1ed0 [ 433.070397] ? __sched_text_start+0x8/0x8 [ 433.074571] ? trace_hardirqs_on+0x10/0x10 [ 433.078852] ? graph_lock+0x170/0x170 [ 433.082674] ? __lock_acquire+0x7fc/0x5020 [ 433.086936] ? mark_held_locks+0xc9/0x160 [ 433.091101] schedule+0xfb/0x450 [ 433.094492] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 433.099254] ? __schedule+0x1ed0/0x1ed0 [ 433.103247] ? retint_kernel+0x10/0x10 [ 433.107166] ? _raw_spin_unlock_irq+0x56/0x70 [ 433.111700] rwsem_down_read_failed+0x362/0x600 [ 433.116387] ? rwsem_down_write_failed_killable+0x10/0x10 [ 433.121962] ? lock_downgrade+0x8f0/0x8f0 [ 433.126133] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 433.130569] call_rwsem_down_read_failed+0x18/0x30 [ 433.135522] __percpu_down_read+0x16e/0x210 [ 433.139874] ? percpu_free_rwsem+0xa0/0xa0 [ 433.144152] __sb_start_write+0x2d7/0x300 [ 433.148334] ext4_page_mkwrite+0x1d0/0x1430 [ 433.152671] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 433.158250] ? find_held_lock+0x36/0x1c0 [ 433.162332] do_page_mkwrite+0x14e/0x520 [ 433.166412] ? print_bad_pte+0x5f0/0x5f0 [ 433.170483] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.174936] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.179534] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 433.184056] do_wp_page+0xf78/0x19b0 [ 433.187802] ? finish_mkwrite_fault+0x610/0x610 [ 433.192506] ? trace_hardirqs_on+0x10/0x10 [ 433.196785] ? lock_acquire+0x1e4/0x540 [ 433.200786] ? __handle_mm_fault+0x1cc8/0x4460 [ 433.205467] ? lock_release+0xa30/0xa30 [ 433.209454] ? pmd_val+0x88/0x100 [ 433.212920] ? add_mm_counter_fast+0xd0/0xd0 [ 433.217361] ? kasan_check_write+0x14/0x20 [ 433.221625] ? do_raw_spin_lock+0xc1/0x200 [ 433.225897] __handle_mm_fault+0x2a84/0x4460 [ 433.230328] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 433.235193] ? graph_lock+0x170/0x170 [ 433.239043] ? lock_downgrade+0x8f0/0x8f0 [ 433.243216] ? kasan_check_read+0x11/0x20 [ 433.247385] ? rcu_is_watching+0x8c/0x150 [ 433.251539] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 433.255963] ? handle_mm_fault+0x8c4/0xc80 [ 433.260212] handle_mm_fault+0x53e/0xc80 [ 433.264300] ? __handle_mm_fault+0x4460/0x4460 [ 433.268904] ? find_vma+0x34/0x190 [ 433.272470] __do_page_fault+0x620/0xe50 [ 433.276547] ? mm_fault_error+0x380/0x380 [ 433.280732] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.286286] ? __x64_sys_clock_gettime+0x170/0x250 [ 433.291247] ? __ia32_sys_clock_settime+0x290/0x290 [ 433.296272] do_page_fault+0xf6/0x8c0 [ 433.300093] ? vmalloc_sync_all+0x30/0x30 [ 433.304253] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.309847] ? do_syscall_64+0x497/0x820 [ 433.313927] ? syscall_slow_exit_work+0x500/0x500 [ 433.318807] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.323744] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.328745] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 433.334151] ? page_fault+0x8/0x30 [ 433.337758] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.342662] ? page_fault+0x8/0x30 [ 433.346257] page_fault+0x1e/0x30 [ 433.349741] RIP: 0033:0x4084b0 [ 433.352949] Code: 24 1f e9 d2 00 00 00 48 ff c2 48 83 fa 08 0f 83 ad 00 00 00 84 01 0f b6 1c 11 38 d8 75 e9 48 89 54 24 20 48 8b 5c 24 48 0f b6 <73> 50 48 0f af f2 0f b6 5b 51 48 89 cf 48 8d 74 3e 08 84 db 74 7c [ 433.372241] RSP: 002b:00007ffe24dde0b0 EFLAGS: 00010287 [ 433.377626] RAX: 0000001b2eb24a24 RBX: 0000000000000000 RCX: 0000001b2fb20000 [ 433.384931] RDX: 0000001b2eb24a28 RSI: 00000000007304a0 RDI: 0000000000000006 [ 433.392224] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.399529] R10: 00007ffe24dde0f0 R11: 0000000000000246 R12: 0000000000000000 [ 433.406815] R13: 0000000000000002 R14: 000000000072bea0 R15: 000000000072bea0 [ 433.414130] INFO: task syz-executor7:16300 blocked for more than 140 seconds. [ 433.421417] Not tainted 4.18.0-rc4+ #139 [ 433.426032] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.434021] syz-executor7 D23048 16300 4531 0x00000004 [ 433.439690] Call Trace: [ 433.442297] __schedule+0x87c/0x1ed0 [ 433.446042] ? __sched_text_start+0x8/0x8 [ 433.450205] ? trace_hardirqs_on+0x10/0x10 [ 433.454476] ? graph_lock+0x170/0x170 [ 433.458313] ? __lock_acquire+0x7fc/0x5020 [ 433.462582] ? print_usage_bug+0xc0/0xc0 [ 433.466664] schedule+0xfb/0x450 [ 433.470062] ? lock_downgrade+0x8f0/0x8f0 [ 433.474316] ? __schedule+0x1ed0/0x1ed0 [ 433.478309] ? mark_held_locks+0xc9/0x160 [ 433.482466] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.487094] ? _raw_spin_unlock_irq+0x27/0x70 [ 433.491624] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 433.496671] rwsem_down_read_failed+0x362/0x600 [ 433.501362] ? rwsem_down_write_failed_killable+0x10/0x10 [ 433.506933] ? lock_downgrade+0x8f0/0x8f0 [ 433.511107] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 433.515580] call_rwsem_down_read_failed+0x18/0x30 [ 433.520532] __percpu_down_read+0x16e/0x210 [ 433.524959] ? percpu_free_rwsem+0xa0/0xa0 [ 433.529241] __sb_start_write+0x2d7/0x300 [ 433.533431] ext4_page_mkwrite+0x1d0/0x1430 [ 433.537817] ? ext4_change_inode_journal_flag+0x3e0/0x3e0 [ 433.543408] ? find_held_lock+0x36/0x1c0 [ 433.547525] do_page_mkwrite+0x14e/0x520 [ 433.551612] ? print_bad_pte+0x5f0/0x5f0 [ 433.555705] ? do_raw_spin_unlock+0xa7/0x2f0 [ 433.560148] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.564754] ? __pte_alloc_kernel+0x2e0/0x2e0 [ 433.569287] do_wp_page+0xf78/0x19b0 [ 433.573048] ? finish_mkwrite_fault+0x610/0x610 [ 433.577776] ? trace_hardirqs_on+0x10/0x10 [ 433.582053] ? __schedule+0x884/0x1ed0 [ 433.586028] ? lock_acquire+0x1e4/0x540 [ 433.590047] ? __handle_mm_fault+0x1cc8/0x4460 [ 433.594666] ? lock_release+0xa30/0xa30 [ 433.598661] ? pmd_val+0x88/0x100 [ 433.602154] ? add_mm_counter_fast+0xd0/0xd0 [ 433.606585] ? kasan_check_write+0x14/0x20 [ 433.610842] ? do_raw_spin_lock+0xc1/0x200 [ 433.615104] __handle_mm_fault+0x2a84/0x4460 [ 433.619553] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 433.624418] ? graph_lock+0x170/0x170 [ 433.628253] ? lock_downgrade+0x8f0/0x8f0 [ 433.632444] ? kasan_check_read+0x11/0x20 [ 433.636630] ? rcu_is_watching+0x8c/0x150 [ 433.640809] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 433.645269] ? handle_mm_fault+0x8c4/0xc80 [ 433.649531] handle_mm_fault+0x53e/0xc80 [ 433.653629] ? __handle_mm_fault+0x4460/0x4460 [ 433.658242] ? find_vma+0x34/0x190 [ 433.661819] __do_page_fault+0x620/0xe50 [ 433.665902] ? clock_was_set_work+0x30/0x30 [ 433.670248] ? mm_fault_error+0x380/0x380 [ 433.674429] ? __x64_sys_nanosleep+0x1f8/0x280 [ 433.679048] ? hrtimer_nanosleep+0x620/0x620 [ 433.683475] do_page_fault+0xf6/0x8c0 [ 433.687302] ? vmalloc_sync_all+0x30/0x30 [ 433.691471] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.697068] ? do_syscall_64+0x497/0x820 [ 433.701174] ? syscall_slow_exit_work+0x500/0x500 [ 433.706143] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.711097] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.716077] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 433.721469] ? page_fault+0x8/0x30 [ 433.725056] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.729926] ? page_fault+0x8/0x30 [ 433.733495] page_fault+0x1e/0x30 [ 433.736968] RIP: 0033:0x4084b0 [ 433.740169] Code: 24 1f e9 d2 00 00 00 48 ff c2 48 83 fa 08 0f 83 ad 00 00 00 84 01 0f b6 1c 11 38 d8 75 e9 48 89 54 24 20 48 8b 5c 24 48 0f b6 <73> 50 48 0f af f2 0f b6 5b 51 48 89 cf 48 8d 74 3e 08 84 db 74 7c [ 433.759447] RSP: 002b:00007ffc7c93c180 EFLAGS: 00010283 [ 433.764834] RAX: 0000001b2e723bdc RBX: 0000000000000000 RCX: 0000001b2f720000 [ 433.772144] RDX: 0000001b2e723be0 RSI: 0000000000730360 RDI: 0000000000000004 [ 433.779435] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 433.786735] R10: 00007ffc7c93c1c0 R11: 0000000000000000 R12: 0000000000000000 [ 433.794042] R13: 0000000000000002 R14: 000000000072bea0 R15: 000000000072bea0 [ 433.801359] INFO: task syz-executor1:16308 blocked for more than 140 seconds. [ 433.808674] Not tainted 4.18.0-rc4+ #139 [ 433.813302] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 433.821293] syz-executor1 D25096 16308 4530 0x00000004 [ 433.826968] Call Trace: [ 433.829578] __schedule+0x87c/0x1ed0 [ 433.833322] ? __sched_text_start+0x8/0x8 [ 433.837493] ? graph_lock+0x170/0x170 [ 433.841319] ? print_usage_bug+0xc0/0xc0 [ 433.845430] schedule+0xfb/0x450 [ 433.848828] ? lock_downgrade+0x8f0/0x8f0 [ 433.853042] ? __schedule+0x1ed0/0x1ed0 [ 433.857072] ? mark_held_locks+0xc9/0x160 [ 433.861253] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 433.865892] ? _raw_spin_unlock_irq+0x27/0x70 [ 433.870422] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 433.875477] rwsem_down_read_failed+0x362/0x600 [ 433.880170] ? rwsem_down_write_failed_killable+0x10/0x10 [ 433.885745] ? lock_downgrade+0x8f0/0x8f0 [ 433.889921] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 433.894377] ? rcuwait_wake_up+0x1cc/0x2f0 [ 433.898635] call_rwsem_down_read_failed+0x18/0x30 [ 433.903617] __percpu_down_read+0x16e/0x210 [ 433.907984] ? percpu_free_rwsem+0xa0/0xa0 [ 433.912265] __sb_start_write+0x2d7/0x300 [ 433.916437] mnt_want_write+0x3f/0xc0 [ 433.920282] filename_create+0x13e/0x5b0 [ 433.924362] ? kern_path_mountpoint+0x40/0x40 [ 433.928899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 433.934478] ? getname_flags+0x26e/0x5a0 [ 433.938571] do_symlinkat+0xfe/0x2d0 [ 433.942319] ? __ia32_sys_unlink+0x50/0x50 [ 433.946584] ? __ia32_sys_access+0x80/0x80 [ 433.950841] __x64_sys_symlink+0x59/0x80 [ 433.954948] do_syscall_64+0x1b9/0x820 [ 433.958867] ? syscall_slow_exit_work+0x500/0x500 [ 433.963740] ? syscall_return_slowpath+0x5e0/0x5e0 [ 433.968700] ? syscall_return_slowpath+0x31d/0x5e0 [ 433.973679] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 433.979078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 433.983958] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 433.989173] RIP: 0033:0x455b57 [ 433.992372] Code: 80 80 fa 3f 77 10 83 e6 1f c1 e6 06 83 e1 3f 09 ce 83 fe 7f 7f 19 c7 44 24 28 fd ff 00 00 48 ff c0 48 89 44 24 30 48 8b 2c 24 <48> 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 [ 434.011640] RSP: 002b:00007ffd5e1a8cf8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 434.019382] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000455b57 [ 434.026684] RDX: 0000000000000000 RSI: 00000000004bb387 RDI: 00007ffd5e1a9a70 [ 434.033989] RBP: 0000000000000013 R08: 0000000000000000 R09: 0000000000fa8940 [ 434.041315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.048633] R13: 0000000000000000 R14: 00007ffd5e1a93a0 R15: 00000000007034c0 [ 434.055960] INFO: task syz-executor2:16310 blocked for more than 140 seconds. [ 434.063256] Not tainted 4.18.0-rc4+ #139 [ 434.067871] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 434.075866] syz-executor2 D23928 16310 4532 0x00000004 [ 434.081531] Call Trace: [ 434.084183] __schedule+0x87c/0x1ed0 [ 434.087959] ? __sched_text_start+0x8/0x8 [ 434.092145] ? graph_lock+0x170/0x170 [ 434.095976] ? print_usage_bug+0xc0/0xc0 [ 434.100093] schedule+0xfb/0x450 [ 434.103491] ? lock_downgrade+0x8f0/0x8f0 [ 434.107662] ? __schedule+0x1ed0/0x1ed0 [ 434.111678] ? mark_held_locks+0xc9/0x160 [ 434.115857] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 434.120480] ? _raw_spin_unlock_irq+0x27/0x70 [ 434.124998] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 434.130070] rwsem_down_read_failed+0x362/0x600 [ 434.134795] ? rwsem_down_write_failed_killable+0x10/0x10 [ 434.140387] ? lock_downgrade+0x8f0/0x8f0 [ 434.144685] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 434.149121] ? rcuwait_wake_up+0x1cc/0x2f0 [ 434.153383] call_rwsem_down_read_failed+0x18/0x30 [ 434.158341] __percpu_down_read+0x16e/0x210 [ 434.162687] ? percpu_free_rwsem+0xa0/0xa0 [ 434.166953] __sb_start_write+0x2d7/0x300 [ 434.171130] mnt_want_write+0x3f/0xc0 [ 434.174955] filename_create+0x13e/0x5b0 [ 434.179061] ? kern_path_mountpoint+0x40/0x40 [ 434.183596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.189174] ? getname_flags+0x26e/0x5a0 [ 434.193258] do_symlinkat+0xfe/0x2d0 [ 434.197040] ? __ia32_sys_unlink+0x50/0x50 [ 434.201293] ? __ia32_sys_access+0x80/0x80 [ 434.205559] __x64_sys_symlink+0x59/0x80 [ 434.209648] do_syscall_64+0x1b9/0x820 [ 434.213573] ? syscall_return_slowpath+0x5e0/0x5e0 [ 434.218529] ? syscall_return_slowpath+0x31d/0x5e0 [ 434.223495] ? entry_SYSCALL_64_after_hwframe+0x59/0xbe [ 434.228895] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 434.233791] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 434.239005] RIP: 0033:0x455b57 [ 434.242620] Code: 80 80 fa 3f 77 10 83 e6 1f c1 e6 06 83 e1 3f 09 ce 83 fe 7f 7f 19 c7 44 24 28 fd ff 00 00 48 ff c0 48 89 44 24 30 48 8b 2c 24 <48> 83 c4 08 c3 89 74 24 28 48 83 c0 02 48 89 44 24 30 48 8b 2c 24 [ 434.261872] RSP: 002b:00007ffe0d00d3e8 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 434.269628] RAX: ffffffffffffffda RBX: 0000000000000013 RCX: 0000000000455b57 [ 434.276951] RDX: 0000000000000000 RSI: 00000000004bb37a RDI: 00007ffe0d00e120 [ 434.284245] RBP: 0000000000000013 R08: 0000000000000000 R09: 0000000001caa940 [ 434.291556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.298849] R13: 0000000000000000 R14: 00007ffe0d00da90 R15: 00000000007034c0 [ 434.306155] [ 434.306155] Showing all locks held in the system: [ 434.312503] 1 lock held by khungtaskd/901: [ 434.316769] #0: 00000000b0adefd9 (rcu_read_lock){....}, at: debug_show_all_locks+0xd0/0x428 [ 434.325438] 2 locks held by rs:main Q:Reg/4391: [ 434.330139] #0: 00000000202a08eb (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 434.338166] #1: 0000000067ccf032 (sb_writers#6){++++}, at: vfs_write+0x452/0x560 [ 434.345860] 2 locks held by rsyslogd/4393: [ 434.350104] #0: 0000000096576f76 (&f->f_pos_lock){+.+.}, at: __fdget_pos+0x1bb/0x200 [ 434.358119] #1: 000000002606b351 (fs_reclaim){+.+.}, at: is_bpf_text_address+0x0/0x170 [ 434.366329] 2 locks held by getty/4483: [ 434.370319] #0: 000000009ca93b5d (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 434.378603] #1: 00000000dbfd92e5 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 434.387490] 2 locks held by getty/4484: [ 434.391479] #0: 0000000012747442 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 434.399761] #1: 000000008d46f246 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 434.408661] 2 locks held by getty/4485: [ 434.412650] #0: 000000007e7f3e15 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 434.420930] #1: 00000000cc0d5f3d (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 434.429814] 2 locks held by getty/4486: [ 434.433804] #0: 00000000fad1eb1f (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 434.442081] #1: 00000000ccd09e9a (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 434.450975] 2 locks held by getty/4487: [ 434.454959] #0: 000000007c8fda96 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 434.463252] #1: 0000000004852cf0 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 434.472142] 2 locks held by getty/4488: [ 434.476124] #0: 000000000c91e99c (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 434.484398] #1: 00000000d7715f65 (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 434.493301] 2 locks held by getty/4489: [ 434.497300] #0: 0000000065a21961 (&tty->ldisc_sem){++++}, at: ldsem_down_read+0x37/0x40 [ 434.505603] #1: 000000004a69cc4e (&ldata->atomic_read_lock){+.+.}, at: n_tty_read+0x335/0x1ce0 [ 434.514502] 2 locks held by syz-fuzzer/4506: [ 434.518921] #0: 000000004130b5ad (&mm->mmap_sem){++++}, at: __do_page_fault+0x389/0xe50 [ 434.527208] #1: 000000009e42b513 (sb_pagefaults){++++}, at: ext4_page_mkwrite+0x1d0/0x1430 [ 434.535775] 2 locks held by syz-fuzzer/4520: [ 434.540216] #0: 000000004130b5ad (&mm->mmap_sem){++++}, at: __do_page_fault+0x389/0xe50 [ 434.548506] #1: 000000009e42b513 (sb_pagefaults){++++}, at: ext4_page_mkwrite+0x1d0/0x1430 [ 434.557075] 1 lock held by syz-executor4/4533: [ 434.561689] #0: 0000000067ccf032 (sb_writers#6){++++}, at: mnt_want_write+0x3f/0xc0 [ 434.569628] 1 lock held by syz-executor5/4536: [ 434.574215] #0: 0000000067ccf032 (sb_writers#6){++++}, at: mnt_want_write+0x3f/0xc0 [ 434.582159] 1 lock held by syz-executor6/14481: [ 434.586836] #0: 0000000067ccf032 (sb_writers#6){++++}, at: mnt_want_write+0x3f/0xc0 [ 434.594802] 2 locks held by syz-executor0/16290: [ 434.599656] #0: 00000000b4bb9409 (&mm->mmap_sem){++++}, at: __do_page_fault+0x389/0xe50 [ 434.607950] #1: 000000009e42b513 (sb_pagefaults){++++}, at: ext4_page_mkwrite+0x1d0/0x1430 [ 434.616511] 2 locks held by syz-executor3/16298: [ 434.621293] #0: 000000002f9baf38 (&mm->mmap_sem){++++}, at: __do_page_fault+0x389/0xe50 [ 434.629588] #1: 000000009e42b513 (sb_pagefaults){++++}, at: ext4_page_mkwrite+0x1d0/0x1430 [ 434.638142] 2 locks held by syz-executor7/16300: [ 434.642918] #0: 00000000cb3c8331 (&mm->mmap_sem){++++}, at: __do_page_fault+0x389/0xe50 [ 434.651208] #1: 000000009e42b513 (sb_pagefaults){++++}, at: ext4_page_mkwrite+0x1d0/0x1430 [ 434.659770] 1 lock held by syz-executor1/16308: [ 434.664462] #0: 0000000067ccf032 (sb_writers#6){++++}, at: mnt_want_write+0x3f/0xc0 [ 434.672408] 1 lock held by syz-executor2/16310: [ 434.677088] #0: 0000000067ccf032 (sb_writers#6){++++}, at: mnt_want_write+0x3f/0xc0 [ 434.685038] [ 434.686682] ============================================= [ 434.686682] [ 434.693716] NMI backtrace for cpu 1 [ 434.697365] CPU: 1 PID: 901 Comm: khungtaskd Not tainted 4.18.0-rc4+ #139 [ 434.704288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.713653] Call Trace: [ 434.716236] dump_stack+0x1c9/0x2b4 [ 434.719851] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.725052] ? vprintk_default+0x28/0x30 [ 434.730022] nmi_cpu_backtrace.cold.4+0x19/0xce [ 434.734707] ? rcu_report_qs_rnp+0x7a0/0x7a0 [ 434.739108] ? lapic_can_unplug_cpu.cold.27+0x3f/0x3f [ 434.744307] nmi_trigger_cpumask_backtrace+0x151/0x192 [ 434.749584] arch_trigger_cpumask_backtrace+0x14/0x20 [ 434.754785] watchdog+0x9c4/0xf80 [ 434.758236] ? reset_hung_task_detector+0xd0/0xd0 [ 434.763072] ? kasan_check_read+0x11/0x20 [ 434.767209] ? do_raw_spin_unlock+0xa7/0x2f0 [ 434.771608] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 434.776698] ? __kthread_parkme+0x58/0x1b0 [ 434.780921] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 434.785927] ? trace_hardirqs_on+0xd/0x10 [ 434.790074] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.795600] ? __kthread_parkme+0x106/0x1b0 [ 434.799914] kthread+0x345/0x410 [ 434.803284] ? reset_hung_task_detector+0xd0/0xd0 [ 434.808129] ? kthread_bind+0x40/0x40 [ 434.811924] ret_from_fork+0x3a/0x50 [ 434.815667] Sending NMI from CPU 1 to CPUs 0: [ 434.820199] NMI backtrace for cpu 0 skipped: idling at native_safe_halt+0x6/0x10 [ 434.821182] Kernel panic - not syncing: hung_task: blocked tasks [ 434.834710] CPU: 1 PID: 901 Comm: khungtaskd Not tainted 4.18.0-rc4+ #139 [ 434.841623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 434.850964] Call Trace: [ 434.853544] dump_stack+0x1c9/0x2b4 [ 434.857169] ? dump_stack_print_info.cold.2+0x52/0x52 [ 434.862354] ? printk_safe_log_store+0x2f0/0x2f0 [ 434.867100] panic+0x238/0x4e7 [ 434.870288] ? add_taint.cold.5+0x16/0x16 [ 434.874424] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 434.879959] ? nmi_trigger_cpumask_backtrace+0x13a/0x192 [ 434.885409] ? printk_safe_flush+0xd7/0x130 [ 434.889725] watchdog+0x9d5/0xf80 [ 434.893171] ? reset_hung_task_detector+0xd0/0xd0 [ 434.898026] ? kasan_check_read+0x11/0x20 [ 434.902171] ? do_raw_spin_unlock+0xa7/0x2f0 [ 434.906576] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 434.911688] ? __kthread_parkme+0x58/0x1b0 [ 434.915915] ? trace_hardirqs_on_caller+0x421/0x5c0 [ 434.920926] ? trace_hardirqs_on+0xd/0x10 [ 434.925072] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 434.930599] ? __kthread_parkme+0x106/0x1b0 [ 434.934911] kthread+0x345/0x410 [ 434.938277] ? reset_hung_task_detector+0xd0/0xd0 [ 434.943122] ? kthread_bind+0x40/0x40 [ 434.946912] ret_from_fork+0x3a/0x50 [ 434.951309] Dumping ftrace buffer: [ 434.954989] (ftrace buffer empty) [ 434.958684] Kernel Offset: disabled [ 434.962301] Rebooting in 86400 seconds..