, 0x4, 0x3, 0x2b, 0x2, 0x2a6, 0x3, 0x2, 0x7f, 0x100, 0x4, 0x6, 0x1, 0x80000001, 0x10000, 0x0, 0xffffffffffffffc1, 0x800, 0x2, 0x1ffc, 0x5, 0x8000, 0x1, 0x5, 0x9, 0x9, 0x1, 0x8001, 0x8, 0x9, 0x3, 0x957, 0xb9, 0x2, 0x1, 0x1, 0x0, 0x7b73ccd3, 0x4, 0x3, 0x100000000000000, 0x7f, 0x751dc2a9, 0xc43, 0x2, 0x5, 0x9, 0x80000001, 0x9, 0x3, 0x40, 0x5, 0x8, 0x101, 0x5, 0x9, 0x7, 0x7, 0x85, 0x8, 0x2, 0x100000001, 0x8, 0x8, 0xa, 0x401, 0xe0, 0xffffffffffffff7f, 0x61a4a716, 0xfffffffffffffff7, 0x9e, 0x9, 0x1, 0x1f, 0x100000000, 0x6fcc, 0x1, 0x5, 0x1, 0xffffffffffffffff, 0x0, 0x6, 0x9, 0x3, 0x1, 0x4, 0x3, 0x3, 0x3, 0x8, 0x80000001, 0xff, 0xfffffffffffffff7, 0x7, 0x6, 0x7ff, 0x6, 0x5, 0xff, 0x78b, 0x81, 0x2100, 0x2, 0xfffffffffffffff8, 0xffffffff, 0x1, 0x40, 0x10000, 0x8, 0x3, 0x0, 0x0, 0x6, 0x8, 0x9, 0x101, 0x1, 0x401, 0x4, 0xfffffffffffffeff, 0x8, 0x5, 0x9, 0x200, 0x10001, 0x8, 0x1, 0x0, 0x7fffffff, 0x100000001, 0x1, 0x0, 0x4, 0x0, 0x2, 0x0, 0x3ff, 0x7fff, 0x4, 0x88e2, 0x1ff, 0xcd6f, 0x0, 0x2, 0x3ff, 0x100, 0xfffffffffffffff8, 0x8, 0x800, 0x2, 0x81e3, 0x6, 0x1, 0x1, 0x6, 0xff, 0x5, 0x4, 0x3, 0xffffffffffffff01, 0x3, 0x0, 0x20, 0x0, 0x22ec, 0x10000, 0x8000, 0xd02, 0x8001, 0x0, 0xd48e, 0xb541, 0x655a, 0x1, 0x3, 0x82b, 0x3ff, 0x2, 0x80, 0x65, 0x20, 0x3ff, 0x4c8d, 0xc07, 0x6, 0x2, 0x9, 0x6, 0x9, 0x0, 0x4, 0x4, 0x41, 0x3, 0x0, 0x1, 0x3f, 0xfffffffffffffffb, 0x7fffffff, 0x90d4, 0x554, 0x1, 0x9, 0x12c1, 0xfffffffffffff500, 0x0, 0x5, 0x39f4, 0x9, 0x51b9, 0x5a84]}, @TCA_CBQ_RATE={0x10, 0x5, {0xa33c, 0x1, 0x80, 0x80, 0x40, 0x20}}]}}, @tclass_kind_options=@c_hfsc={{0xc, 0x1, 'hfsc\x00'}, {0x24, 0x2, [@TCA_HFSC_FSC={0x10, 0x2, {0x9e, 0x401, 0x8001}}, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0x81, 0x63}}]}}, @tclass_kind_options=@c_qfq={{0x8, 0x1, 'qfq\x00'}, {0x1c, 0x2, [@TCA_QFQ_LMAX={0x8, 0x2, 0xe680}, @TCA_QFQ_LMAX={0x8, 0x2, 0x40}, @TCA_QFQ_LMAX={0x8}]}}, @tclass_kind_options=@c_drr={{0x8, 0x1, 'drr\x00'}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8}}}, @tclass_kind_options=@c_htb={{0x8, 0x1, 'htb\x00'}, {0x498, 0x2, [@TCA_HTB_PARMS={0x30, 0x1, {{0x4, 0x3, 0x7, 0x3, 0x0, 0x94c}, {0x401, 0x3, 0x40, 0xe000000000000000, 0x9}, 0x200, 0x3ff, 0x81, 0x3, 0x1}}, @TCA_HTB_CTAB={0x404, 0x3, [0xffffffffffffb342, 0x8, 0x1ff, 0x100000000, 0x9, 0x1000, 0x1, 0x4000000000000, 0x678d, 0xffffffff, 0x40, 0x3, 0x5, 0x5, 0x1cb, 0x6, 0x1, 0x7, 0x5, 0x7fff, 0xf9, 0x2, 0x7fffffff, 0xfffffffffffffffc, 0x2, 0x119, 0x3, 0x80000001, 0x0, 0x9, 0x5, 0x281, 0x1, 0x8, 0x1, 0x0, 0x1, 0x0, 0x9, 0x9, 0xc, 0x7, 0x5, 0x6, 0x7b8b, 0x1f, 0x8, 0x0, 0x7f, 0x1, 0x61, 0x81, 0x5, 0x3b7, 0x7f, 0x2, 0x80000001, 0x8, 0x46, 0x6, 0x1000, 0x20, 0x7, 0x8001, 0x6, 0xebc7, 0xe6, 0x40f4, 0x0, 0x9, 0x8, 0x3800000000000000, 0x0, 0x8, 0x3, 0xfa40, 0x10000, 0x6, 0x1000, 0x7ec, 0x3f, 0x9, 0x50f7, 0x400, 0x8180, 0x200, 0x8, 0x2, 0x7fac5bcc, 0x7fff, 0x7fffffff, 0x8, 0x7f, 0x200, 0x48000000000000, 0x5, 0x3, 0xc9a, 0xf, 0x7fffffff, 0x7316, 0x2, 0x6, 0x6, 0xa67, 0x9, 0xffffffffffffffff, 0x1, 0x10000, 0x6, 0x1, 0x2, 0x3, 0x10000, 0x0, 0x9, 0x40, 0x1, 0x2, 0x7, 0x100, 0x7, 0x100000001, 0xd8, 0x9, 0x1, 0x6c2e, 0x5, 0x7, 0x7f, 0x81, 0x1, 0xfff, 0x8000, 0xb295, 0x3, 0x1, 0x4, 0xc805, 0x7, 0x0, 0xfa0, 0x5, 0xfffffffffffffff9, 0x61, 0x0, 0x3, 0xffffffffffffffc0, 0x9, 0x2, 0x60000, 0xfffffffffffffffa, 0xffff, 0x0, 0x7fff, 0x8, 0x3, 0xef, 0x800, 0x200, 0x200, 0x9, 0x400, 0x6687, 0x4, 0x3, 0xcabc000000000, 0x9, 0x9, 0xffffffff, 0x0, 0x2c4, 0x367, 0xfffffffffffffffe, 0xa6, 0x6, 0xf15, 0x2, 0x393, 0x3, 0x1, 0x100000000, 0x8, 0x7, 0x9, 0x3, 0x1832, 0x0, 0x6, 0x3, 0xed0000, 0x7ff, 0x40, 0x3, 0x1, 0xc8b7, 0x9, 0x101, 0x7, 0xc, 0xff, 0x0, 0x1, 0x75, 0xffffffff, 0x5, 0xdde6, 0xfffffffffffffffb, 0x2, 0x7ff, 0x4, 0x4, 0x6e6783ca, 0x8, 0x31, 0x8, 0x4, 0x10001, 0x0, 0x3, 0x5, 0x5, 0x1ff, 0x7, 0x7, 0x0, 0x1, 0xf0, 0x0, 0x7, 0x401, 0x9, 0x100, 0x8, 0x20, 0xa066, 0x5000000000, 0x7f, 0x3f, 0x2, 0x3, 0x2, 0x4, 0x9, 0xfeb, 0x7, 0x4000000000, 0x800, 0x0, 0x7, 0x4, 0x6, 0xffffffff, 0x5, 0x7fff, 0x88e]}, @TCA_HTB_RATE64={0xc, 0x6, 0x3}, @TCA_HTB_CEIL64={0xc, 0x7, 0x3}, @TCA_HTB_PARMS={0x30, 0x1, {{0x1, 0x0, 0x9, 0x0, 0x9, 0x1}, {0x7, 0x0, 0x7, 0x5, 0x4, 0x6}, 0x4, 0x1, 0x3ff, 0xfffffffffffff001, 0x100}}, @TCA_HTB_RATE64={0xc, 0x6, 0x2}, @TCA_HTB_RATE64={0xc, 0x6, 0x4}]}}]}, 0xd78}, 0x1, 0x0, 0x0, 0x40}, 0x80) close(r0) [ 1321.499328] binder: 9353:9355 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1321.543714] binder: 9365:9370 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1321.570720] binder: 9350:9364 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1321.588762] binder: 9350:9364 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:05:45 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:05:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/status\x00', 0x0, 0x0) keyctl$setperm(0x5, r0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000018}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x400, 0x70bd27, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x80}}, ["", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:05:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:05:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:45 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000180)) socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000280)="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", 0xc9}], 0x1) 17:05:45 executing program 0: mknod(&(0x7f00000001c0)='./file0\x00', 0x90, 0x1) r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) lsetxattr$security_selinux(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:syslogd_exec_t:s0\x00', 0x24, 0x2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$netlink(r2, &(0x7f0000000000), &(0x7f0000000040)=0xc) close(r0) 17:05:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000080)) 17:05:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:45 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$binfmt_misc(r0, &(0x7f0000000140)={'syz0', "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"}, 0x1004) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1324.459909] binder: 9381:9383 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1324.497760] binder: 9395:9399 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:05:45 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000080)={0xfff, 0x2, 0x4, 0x6, 0x3, [{0x8, 0x887d, 0x3b4, 0x0, 0x0, 0x802}, {0x7fffffff, 0x63, 0x2, 0x0, 0x0, 0x84}, {0x7, 0x4, 0x3, 0x0, 0x0, 0x200}]}) [ 1324.532904] binder: 9406:9408 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1324.545019] binder: 9406:9408 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:05:48 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:05:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:48 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000140)={'filter\x00', 0x65, "7747ac5a232341491894f3616e6244f57eb67bfe882a9aa2f3c15d79095305a40cae626fc8118cd6f40f7c332da1bc93a9c309573af2afc247a4349df37696233fa02e4a20fe3879f1790609513939584368a3092c148cab689d7e4ec143b707d7f2dc7dc1"}, &(0x7f0000000200)=0x89) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000000)) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x80000, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000080)=0x0) write$FUSE_LK(r4, &(0x7f00000000c0)={0x28, 0x0, 0x5, {{0xffff, 0x7, 0x2, r5}}}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:05:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0xfffffffffffffe0d) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f0000000080), 0x8) 17:05:48 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)=0x1, 0x0) r2 = dup2(r1, r1) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0), 0x4800) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @empty}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)='ipddp0\x00', 0x20, 0x5, 0x4}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x7d) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa800200f7b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2ce5587dcf82dfcb87de1482278c4273fac2c0e130c143232c8a82fb510333fc7ee1d6e0", @ANYRES16=r6, @ANYBLOB="000625bd7000fedbdf25040000005000010008000800050000000800050001000000080002006200000008000500030000001400030000000000000000000000000000000000080001000a000000080004004e220000080004004e2100000800050001000000440002000800050004000000080004006fa7000008000d000100000008000e004e210000080005000200000000000000080004000200000008000300070000000800040008000000240003000800080051000000080004000800000008000500e0000002080007004e35000000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x4) 17:05:48 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="05630440000000008f5515cbd43c711900475b9f48676195432daf9369049ab470ef67e16d77f0d5e97b90e4105b542c65"], 0x0, 0x0, 0x0}) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0f620c4000000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0xfffffd81, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 17:05:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x2fa) 17:05:48 executing program 1: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) openat$urandom(0xffffffffffffff9c, &(0x7f0000000240)='/dev/urandom\x00', 0x400000, 0x0) r2 = getuid() ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000280)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1000000000003, &(0x7f0000b67000), &(0x7f0000000040)=0x4) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/context\x00', 0x2, 0x0) write$FUSE_CREATE_OPEN(r1, &(0x7f0000000140)={0xa0, 0xffffffffffffffda, 0x3, {{0x3, 0x1, 0x6, 0x3ff, 0x1, 0x1, {0x4, 0x1f, 0x8be8, 0x1, 0x1ff, 0xfffffffffffffffd, 0x80, 0xffffffff, 0x8, 0xb0c2, 0x81, r2, r5, 0x3, 0x2}}, {0x0, 0x16}}}, 0xa0) 17:05:48 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ashmem\x00', 0x20042, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f0000000240)={r0, 0x0, 0x9, 0x6, 0x6}) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RTC_WKALM_SET(r3, 0x4028700f, &(0x7f00000002c0)={0x0, 0x0, {0x22, 0x35, 0x13, 0x17, 0x2, 0x9, 0x3, 0x65, 0xffffffffffffffff}}) write(r1, &(0x7f0000000040)="a2c82dcf8ca63517751b3bc0eecb66338a8a6337f0cb9fb1fc570f6aa882558947c420d884f0591fe9039c75f2a637e27c551dbad4c98a44eca82095dbb2b9f738a49cfeb7a30b5e1e865d9f78a481a88eff8dc474f0fe0fa50b42fe914b04ae9f6ba3d80cd4f81400834a1298a5f9234129a4bd0946cf17595836b122d5b42b2bcf230a9d", 0x85) fcntl$getownex(r3, 0x10, &(0x7f0000000300)) r4 = dup3(r2, r2, 0x80000) delete_module(&(0x7f0000000200)='\x00', 0x200) accept(r2, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @hyper}, &(0x7f00000001c0)=0x80) openat$cgroup_ro(r4, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) 17:05:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1327.494336] binder: 9424:9433 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1327.503391] binder: 9424:9433 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:05:48 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) delete_module(&(0x7f0000000000)='\x00', 0xa00) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') ftruncate(r0, 0x4) close(r0) 17:05:48 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$get_security(0x11, r0, &(0x7f0000000140)=""/107, 0x6b) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) write$ppp(r1, &(0x7f0000000080)="e769018474b7bc48179f11c613d3ac305a61489ff76b9f51f2c6e484b18c7085741dc1492f8d4170faf0868f659ab9a9825c94a11fe3ded1b3d9e388a0d9b5ebdd57bd144b6b9cc5c5e5fa49466bafdf9e97bfabb9fe171adb3bfa122ba15c8537d3ed0dad7a59483a83625b08fcf20d7d02a8fc3d9967ef4513088195d92a29e89850e02a65ce2f6d3bbfddd017a0271b622065e2a7edb50bd8a0b2e92df9548d19e150b58b29ab57676a5317e1b0a019c6f2", 0xb3) keyctl$KEYCTL_PKEY_QUERY(0x18, r0, 0x0, &(0x7f0000000240)='}\x00', &(0x7f0000000280)) keyctl$setperm(0x5, r0, 0x0) fsetxattr(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="a2837266732e73797a"], &(0x7f0000000200)='eth1vboxnet0\x00', 0xd, 0x3) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 1327.550934] binder: 9453:9455 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1327.562310] binder: 9453:9455 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1327.646335] binder: 9441:9443 unknown command 536872576 [ 1327.652402] binder: 9441:9443 ioctl c0306201 20008fd0 returned -22 [ 1327.655575] binder: 9441:9473 unknown command 1986356271 [ 1327.655584] binder: 9441:9473 ioctl c0306201 20000040 returned -22 17:05:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$clear(0x7, r0) 17:05:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:51 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0xffffffffffffffff, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:05:51 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80, 0x0) ioctl$EVIOCGBITKEY(r1, 0x80404521, &(0x7f0000000140)=""/195) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) preadv(r1, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/111, 0x6f}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:05:51 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) write$P9_RCLUNK(r2, &(0x7f0000000100)={0x100000065, 0x79, 0x2}, 0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x5b, 0x0, &(0x7f0000000180)="90adfd1327d6cf4beb8a77fd6ce71775c46096ade895d2339fdf3375402526c0571f098a5ceb22eb76e6644e9ab74a669a22d4e4a0be981efe1d411b55a304e56898ecf899fdf863d4e201f327a160532da71d7050ca6ef64142ce"}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:51 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) futex(0x0, 0x8c, 0x0, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)=0x1, 0x0) r2 = dup2(r1, r1) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f00000001c0)) pipe2(&(0x7f00000000c0), 0x4800) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) ioctl$sock_inet_SIOCADDRT(r3, 0x890b, &(0x7f0000000340)={0x0, {0x2, 0x4e22, @loopback}, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e24, @empty}, 0x1, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000300)='ipddp0\x00', 0x20, 0x5, 0x4}) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000048000), 0x0) mmap(&(0x7f0000000000/0xddf000)=nil, 0xddf000, 0x3, 0x4032, 0xffffffffffffffff, 0x0) exit(0x7d) r5 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r5, &(0x7f0000000000)=[{&(0x7f0000000200)="580000001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa800200f7b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2ce5587dcf82dfcb87de1482278c4273fac2c0e130c143232c8a82fb510333fc7ee1d6e0", @ANYRES16=r6, @ANYBLOB="000625bd7000fedbdf25040000005000010008000800050000000800050001000000080002006200000008000500030000001400030000000000000000000000000000000000080001000a000000080004004e220000080004004e2100000800050001000000440002000800050004000000080004006fa7000008000d000100000008000e004e210000080005000200000000000000080004000200000008000300070000000800040008000000240003000800080051000000080004000800000008000500e0000002080007004e35000000000000"], 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x4) 17:05:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TCSETA(r1, 0x5406, &(0x7f0000000100)={0x7ff, 0xd, 0x8, 0x617, 0x0, 0x1ff, 0x1, 0x3ff, 0xe46, 0x4}) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r2, 0x0) keyctl$get_security(0x11, r2, 0x0, 0x0) 17:05:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:51 executing program 1: fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) r1 = getuid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@remote, @in6=@ipv4={[], [], @local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@local}}, &(0x7f0000000300)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f00000003c0)=0x0, &(0x7f0000000400), &(0x7f0000000440)) lstat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000a40)='/selinux/enforce\x00', 0x109000, 0x0) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000a80)) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getegid() lstat(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0), &(0x7f0000000700)=0x0, &(0x7f0000000740)) r11 = getegid() lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000900)={{}, {0x1, 0x7}, [{0x2, 0x1, r0}, {0x2, 0x3, r1}, {0x2, 0x5, r2}, {0x2, 0x5, r3}, {0x2, 0x0, r4}], {0x4, 0x5}, [{0x8, 0x2, r5}, {0x8, 0x7, r7}, {0x8, 0x7, r8}, {0x8, 0x7, r9}, {0x8, 0x7, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x6, r13}, {0x8, 0x0, r14}], {0x10, 0x7}, {0x20, 0x1}}, 0x94, 0x0) r15 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) r16 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz'}, 0x0, 0x0, r15) keyctl$setperm(0x5, r16, 0x0) keyctl$get_security(0x11, r16, 0x0, 0x0) r17 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockname$packet(r17, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000a00)=0x14) 17:05:51 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:51 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) init_module(&(0x7f0000000040)='+proc\x00', 0x6, &(0x7f0000000080)='syz') keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0xfffffffffffffec2) 17:05:51 executing program 1: r0 = creat(&(0x7f0000000080)='./file1\x00', 0x2) ioctl$BLKBSZSET(r0, 0x40081271, &(0x7f00000000c0)=0x100) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = creat(&(0x7f0000000040)='./file0\x00', 0x1) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="030000000000000002004e21ac1e01010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000499a0f0d00010000000100000002004e2000"/276], 0x110) 17:05:51 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1330.550188] binder: undelivered death notification, 0000000000000000 17:05:54 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:05:54 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r2, &(0x7f0000000000)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000440)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0x0, 0x101, 0x0, 0xa2bb, 0x428a3223}) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[], 0xfffffe4b) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) accept(r1, &(0x7f0000000000)=@ethernet, &(0x7f0000000080)=0x80) 17:05:54 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:54 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:54 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:05:54 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:54 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:05:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1333.583512] binder: 9568:9570 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1333.593987] binder: 9568:9570 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1333.614426] binder: 9551:9552 ioctl 8917 200000c0 returned -22 [ 1333.655493] binder: 9551:9573 ioctl 8917 200000c0 returned -22 [ 1333.663675] binder: 9551:9552 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:05:57 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:05:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2040, 0x0) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000140)={0x17, 0xb1, &(0x7f0000000040)="12a63ffcd0e02ad375bd7aeadb2c99ed34c5a494b2da15b12555a2ae6f1cf25bdd27965a9b50b96d61d7f2c0ffe5db96123e215a77ff165ecec0fcc8273a51a11b8e0618cb58551709e1ee3ee7a7bfc8390492aec4c24d598b8953d1bb92a2841071c0ca64cf9e639f049cb27bd27d41f8c583720b3994086271507ab9f7a01fe91f6dad43d934707b07fc5e846e7bb8f9fcdeec34f1bd09d6d094ba45bbcda092f505f2d2eb41f3c3435f8deb6800a109"}) 17:05:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:57 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:05:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0xfffffffffffffffc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) syslog(0xe, &(0x7f0000000280)=""/181, 0xb5) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000180)=""/232) 17:05:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$FITRIM(r1, 0xc0185879, &(0x7f0000000080)={0x7, 0x100000001, 0x1}) 17:05:57 executing program 1: r0 = add_key(&(0x7f0000000040)='pkcs7_test\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)="f5fd2859894b6b5c514defd3f0635ec8576fb5184b32c8c770de43441fef3f67d01406b370279782ccab722614f5fd76269731e4ed6e5c322ec8ef000988d529fe9bc9ee00be3d1aa0a18d1e7064ae4655310968d5b99ff720d76059aff5df3bcfd1477eab2cdbb82120833106458c7872c5a97c900a93a9dc760f5aa90fb29bc8162d39dc6fd18b3cfe9f922ee1b06a0d0b335d4d3d219307c269d1c9be", 0x9e, 0xfffffffffffffffd) keyctl$setperm(0x5, r0, 0x2) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000200)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000001c0)={@dev={0xac, 0x14, 0x14, 0x11}, @empty}, 0x10) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) 17:05:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:05:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x100) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) ftruncate(r1, 0x4c9) r3 = dup2(r1, r0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x900}) 17:05:57 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) lgetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000040)=@known='com.apple.system.Security\x00', &(0x7f0000000200)=""/169, 0xa9) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:05:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1336.539417] binder: 9589:9591 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1336.558240] binder: 9589:9591 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:05:57 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x20000400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$RNDCLEARPOOL(r2, 0x5206, &(0x7f0000000040)=0x80) close(r0) [ 1336.610525] binder: 9615:9617 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1336.618520] binder: 9615:9617 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1336.658210] binder: undelivered death notification, 0000000000000000 17:06:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x200080, 0x0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f0000000080)=0x113c) 17:06:00 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:00 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$IOC_PR_RESERVE(r2, 0x401070c9, &(0x7f0000000080)={0x20, 0xff, 0x1}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) close(r0) 17:06:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x7fffffff) recvfrom(r2, &(0x7f0000000180)=""/193, 0xc1, 0x40000040, &(0x7f0000000280)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x4, 0x4, 0x2, 0x1, {0xa, 0x4e21, 0x0, @rand_addr="ca384c6e54871637d0f36de1762d8617", 0x211}}}, 0x80) getsockopt$inet_opts(r2, 0x0, 0x4, &(0x7f0000000300)=""/190, &(0x7f0000000100)=0xbe) dup(r1) write$nbd(r3, &(0x7f00000003c0)={0x67446698, 0x1, 0x0, 0x1, 0x2, "44b610173a9cbd7defbb31c746a0fb97d3fca1730bee389df4376b0fe89596"}, 0x2f) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:00 executing program 2: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x1100082) r2 = timerfd_create(0x0, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000007000)={{}, {0x0, 0x5}}, &(0x7f0000002000)) timerfd_gettime(r2, &(0x7f0000000000)) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000440)) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f00000003c0)={0x0, 0x101, 0x0, 0xa2bb, 0x428a3223}) write$binfmt_elf64(r4, &(0x7f0000000040)=ANY=[], 0xfffffe4b) setsockopt$sock_int(r5, 0x1, 0x200000010, &(0x7f0000000540)=0x1, 0x4) r6 = syz_open_procfs(0x0, &(0x7f0000000500)='\x00\x00\x00\x00\x00\xe8\xee\xc9\x96\xc2;\xaf\t\xa8M*\xe4;~y\xb2\xb3\xba\b;/\xb6&\xa5\xaa\xcec\x1e\x8a\xc9n;v<\xd6h\xb0\x15\xaf;x\xb5;\xea;P\xb5w^2\f\xe5\xcc`\xa0\xce\xf0+\x19v\xb9I\xdf\xfe\x13\xd9\x1a\xd6;+\x16\x05\x1aul>\x82@\x0f\xdf\xcd\x99\x9a\x13\xe2[F\xf0\xc1\xfb\xae\xb5\xb5\x1f\xf3\xe9\xd5\xbf\x13k\xbc)\xa1nbx\x9c\x02\xa6p?\x12\x89\nAr\xe9Q\xb0\x80Q\x8e\xf2\xf0yX\x9b\x96\xa4\x8b\x01f\xe0\x04\xbd\x93K!\xa0D-\xfc\x12\x02\xe2\xb5WQ\xb4\xb1\xf2\x16)\xc8\b\xc2\x99\x9a\xd9\xa6p\xedK\xb5\x8b\xe8\xbf\xa0\xa1\x13\xd78Mt$\x06\xb6c\xd0Y\x05\xd1l\x98|\xff\xb5\v\x93\x7f\xbc\x1a\x7f\xa90xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:00 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x2) keyctl$get_security(0x11, r0, 0x0, 0x0) creat(&(0x7f0000000040)='./file0\x00', 0x10) 17:06:00 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) ioctl$UI_BEGIN_FF_UPLOAD(r2, 0xc06855c8, &(0x7f0000000040)={0x3, 0x7, {0x52, 0x7, 0xb88, {0x3, 0x6}, {0x0, 0x4}, @rumble={0x5, 0x644}}, {0x57, 0x5, 0x5, {0x0, 0x60}, {0x7, 0x4}, @ramp={0x0, 0x2, {0x3ff, 0x10001, 0xfffffffffffff58e, 0x2}}}}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:00 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000200)=0x80, 0x80800) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280)='team\x00') getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000380)={{{@in=@dev, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@multicast1}}, &(0x7f0000000480)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000540)={@rand_addr, 0x0}, &(0x7f0000000580)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f00000005c0)={@dev, 0x0}, &(0x7f0000000600)=0x14) getpeername(0xffffffffffffffff, &(0x7f0000003240)=@xdp={0x2c, 0x0, 0x0}, &(0x7f00000032c0)=0x80) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000003300)={{{@in6=@mcast2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000003400)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003500)={'team0\x00', 0x0}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000003540)={@dev, 0x0}, &(0x7f0000003580)=0x14) accept(0xffffffffffffffff, &(0x7f00000035c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003640)=0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000003680)={0x0, @multicast1, @dev}, &(0x7f00000036c0)=0xc) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000005a00)={@rand_addr, @loopback, 0x0}, &(0x7f0000005a40)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000005a80)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000005b80)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000005bc0)={@remote, 0x0}, &(0x7f0000005c00)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000005c40)={@mcast2, 0x0}, &(0x7f0000005c80)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000005d80)={@mcast2, 0x0}, &(0x7f0000005dc0)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000005ec0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000005f00)=0x14, 0x80800) getpeername$packet(0xffffffffffffffff, &(0x7f0000006340)={0x11, 0x0, 0x0}, &(0x7f0000006380)=0x14) accept4$packet(0xffffffffffffffff, &(0x7f0000006480)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000064c0)=0x14, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000068c0)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006940)={'team0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000006980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000069c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000006a00)={{{@in6, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f0000006b00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006b40)={'team0\x00', 0x0}) accept$packet(0xffffffffffffffff, &(0x7f0000006b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000006bc0)=0x14) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000006c00)={{{@in6=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in=@loopback}}, &(0x7f0000006d00)=0xe8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006d40)={'bridge_slave_0\x00', 0x0}) accept4$packet(0xffffffffffffffff, &(0x7f0000006d80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000006dc0)=0x14, 0x80800) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000006e00)={@loopback, @rand_addr, 0x0}, &(0x7f0000006e40)=0xc) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000007b00)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000007ac0)={&(0x7f0000006e80)={0xc0c, r1, 0x800, 0x70bd2b, 0x25dfdbff, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x234, 0x2, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x2ffb}}, {0x8, 0x6, r5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x5d2f}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x5, 0x3, 0x8, 0x9}, {0x6, 0x79, 0x2f9, 0x80000000000000}, {0x401, 0x6, 0x80000001, 0x3}]}}}]}}, {{0x8, 0x1, r7}, {0x1f8, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2a07}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffc1}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8f}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x2, 0x3, 0x1, 0x7}, {0x101, 0x1f, 0x1, 0x8}, {0x9, 0x240, 0x8000, 0x6a}, {0x22, 0x4, 0x6, 0x401}, {0x2, 0x8, 0x401, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r9}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0xc, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0xffffffff7fffffff}}, {0x8, 0x6, r10}}}]}}, {{0x8, 0x1, r11}, {0xd0, 0x2, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0xe5}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x3, 0x1, 0x1, 0xe30}, {0x7, 0x1000, 0x6, 0x5}, {0x9, 0x7}, {0x5310, 0x1000, 0x66}, {0x5, 0x3, 0xfffffffffffffff8, 0xfffffffffffffff9}]}}}]}}, {{0x8, 0x1, r12}, {0x40, 0x2, [{0x3c, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0xc, 0x4, 'random\x00'}}}]}}, {{0x8, 0x1, r13}, {0x284, 0x2, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r14}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r15}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x6}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0xc0}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffffc2}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x44, 0x4, [{0xe00000000000, 0xea, 0x8, 0x1c800000000}, {0x6, 0x1, 0x81, 0xfffffffffffff001}, {0x100000000, 0x2800000, 0x1, 0x7}, {0xf0, 0x0, 0x1ff, 0x3}, {0x1ff, 0x6, 0x0, 0x9}, {0x2, 0x8, 0x1275, 0x9f6}, {0xff, 0x3, 0x8, 0xffff}, {0x6, 0x7, 0x2d77, 0x2}]}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r18}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x8}}}]}}, {{0x8, 0x1, r19}, {0x88, 0x2, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r20}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x14, 0x4, [{0x0, 0x8, 0x4, 0x81}, {0xfdfe, 0x0, 0x3, 0x57c25837}]}}}]}}, {{0x8, 0x1, r21}, {0xf0, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0xe8f}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r22}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8}}, {0x8, 0x6, r23}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r24}}}]}}, {{0x8, 0x1, r25}, {0x200, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0xfffffffffffffffe}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r26}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r27}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x3ff}}, {0x8, 0x6, r28}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3f}}, {0x8, 0x6, r29}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x8001}}}]}}]}, 0xc0c}, 0x1, 0x0, 0x0, 0x800}, 0x1) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="635aec7a0a0a0bae103863646a66947ff45ae4d0d919e610a7bb15c0da4ed0b809959f2f31bc5dd1910a9a87f9811e9790b14f17c265a9204c9b7cf5b4470573da33a1ba82f59d62e2c18c6cd2a39e7e6d401a318655404f08e47b508b0ae62e7f7b7e4998522806f0bcd394e070c6a8da48cc13e8c4d07e2999", 0x7a, 0xfffffffffffffffe) r30 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_security(0x11, r30, 0x0, 0xffffffffffffff01) [ 1339.546591] binder: 9634:9636 ioctl c0306201 0 returned -14 [ 1339.560127] binder: 9634:9636 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1339.585298] binder: 9634:9636 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:00 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x26) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x103000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x9) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="bde075dc9509ebd6b0eaa222668a752dafb10883e5f39bb4883f7375edc1ca274c85dce1c79987744e28209ffbe2ab149882215e8a7627ef8540e49f", 0x3c, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x80200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:00 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400200, 0x113) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) lseek(r0, 0x0, 0x4) prctl$PR_MCE_KILL_GET(0x22) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x160) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000140)=""/118) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) close(r0) [ 1339.637256] binder: 9655:9661 ioctl c0306201 0 returned -14 [ 1339.650223] binder: 9655:9661 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1339.658127] binder: 9655:9661 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:03 executing program 1: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/fib_triestat\x00') getsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="e9cbc6e809f622ca023a495f28a00dccaae30229f9250fe82d3fb57cdea146f55c690cf489", 0x25, 0xfffffffffffffffc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000240)={0x138, r2, 0x0, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x9c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x100}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @rand_addr=0x5}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x492f}}, {0x14, 0x2, @in={0x2, 0x4e24, @empty}}}}]}, @TIPC_NLA_SOCK={0x14, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x100}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x800}, 0x810) keyctl$revoke(0x3, r1) r3 = add_key$keyring(&(0x7f00000001c0)='keyring\x00', &(0x7f0000001340)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x0) keyctl$get_security(0x11, r3, 0x0, 0x0) 17:06:03 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:03 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0xfffffffffffffffd, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="11dca5055e62cfe47bf070") sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x80}}, 0x0) r3 = socket$key(0xf, 0x3, 0x2) socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg(r3, &(0x7f0000000180), 0x400024c, 0x0) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000240)=0x8) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:03 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x26) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x103000, 0x0) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0x9) r3 = add_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="bde075dc9509ebd6b0eaa222668a752dafb10883e5f39bb4883f7375edc1ca274c85dce1c79987744e28209ffbe2ab149882215e8a7627ef8540e49f", 0x3c, 0xfffffffffffffffb) keyctl$setperm(0x5, r3, 0x80200) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000180)="413bf026dd7b3190af6da4b9ca7b999f141674953c90bd9135acec7c7fbf421c6633c84147c009a789c40e480115cbfc8e91d9fa499dacb2a89e201a96ef6f78d65048a81b28f0270c7c69451832a7f793f332d56cd8f49548ef82ae5ecec4413e5ad4a7bf613422e2a1e7e853f3fd77751271", 0x73, 0xfffffffffffffffa) r3 = request_key(&(0x7f0000000200)='id_legacy\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000280)='\x00', 0xfffffffffffffffe) keyctl$reject(0x13, r2, 0x2, 0x1f, r3) 17:06:03 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$set_timeout(0xf, r0, 0x1) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$negate(0xd, r0, 0x4896, r0) [ 1342.561948] binder: 9695:9696 ioctl c0306201 0 returned -14 [ 1342.570368] binder: 9695:9696 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1342.583475] binder: 9695:9696 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:03 executing program 1: r0 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x400) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:03 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KDSETLED(r3, 0x4b32, 0x7fff) rt_sigreturn() ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:03 executing program 1: r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20200, 0x111) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x0) keyctl$get_security(0x11, r2, 0x0, 0x0) [ 1342.618620] binder: 9713:9719 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1342.638890] binder: 9713:9719 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:03 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, &(0x7f0000000600)=ANY=[], &(0x7f00000001c0)='\x00\xf1)\r*\xbbzL\x8e7\x9e\xaa\xb3y\xb9\xfa!\xad!\xb4\xd4\x94\xa0\x86\xcf\x12#\xb4\xd3n$\x85\x06k\xb2\xf9\xd5\"\xfe\x86 \b\x7f\xe8\x8a\xcf\x89\x9b\xbaR]\xf5{J\x84\x15\xf9)\xf3\xc8\xd5`\xe6\xe6\x9eI\x02\xce\x1fI\xa8w\xc3#\xba\xf5\xe9\xea>\xc7\xab2,\xa0\x84t\xce\x04Tf\xc5\xfe`\'\x9b\xe2MH%\x93\x028\xcb\x0f\xdb\x16\xe2l\x80\xe6\xcd\xceW\x01SS-o`X\xf6\xa4\xc1|\xbe\xc4\xf0\xac1zp\xc9\x89\xef.\xa4\x91\xb4\xf3(', 0x1, 0x0, 0x0, 0x0, 0x1, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000140)={0xffffffffffffffff}, 0x10}, 0x70) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x185000, 0x0) getsockopt$EBT_SO_GET_INFO(r2, 0x0, 0x80, &(0x7f0000000040)={'broute\x00'}, &(0x7f00000000c0)=0x78) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) preadv(r1, &(0x7f0000000180)=[{&(0x7f0000000280)=""/176, 0xb0}, {&(0x7f0000000340)=""/140, 0x8c}], 0x2, 0x0) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$UI_DEV_SETUP(r2, 0x405c5503, &(0x7f00000005c0)={{0x3f, 0x0, 0x4, 0xfffffffffffffffd}, 'syz1\x00', 0x1c}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000540)={0x3, 'tunl0\x00', 0x3}, 0x18) fchmod(r1, 0x60) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x8c000002}, 0xc, &(0x7f00000004c0)={&(0x7f0000000580)={0x24, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x7ff}}, ["", "", "", "", ""]}, 0xfffffffffffffe7d}, 0x1, 0x0, 0x0, 0x40040}, 0x40) close(r0) 17:06:03 executing program 1: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@ipv4={[], [], @empty}}}, &(0x7f0000000340)=0xe8) r2 = geteuid() setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000380)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@loopback, 0x4e21, 0x1, 0x4e21, 0x2, 0xa, 0x80, 0x0, 0x3a, r1, r2}, {0x7, 0x2, 0x5, 0x1, 0x80, 0x7, 0xc8, 0x3ff}, {0x0, 0x0, 0x1, 0x7}, 0x948d, 0x6e6bb5, 0x2, 0x1, 0x2, 0x3}, {{@in=@multicast2, 0x4d4, 0x3c}, 0xa, @in=@multicast2, 0x3504, 0x3, 0x0, 0x1, 0x20f0, 0x4, 0x200}}, 0xe8) keyctl$setperm(0x5, 0x0, 0x0) add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000080)={'\x00', {0x2, 0x4e21, @loopback}}) keyctl$get_security(0x11, 0x0, 0x0, 0xffffff99) alarm(0x1) [ 1342.674410] binder: 9733:9735 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1342.691190] binder: 9733:9735 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1342.716120] binder: 9722:9738 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1342.742268] binder: 9749:9752 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1342.755674] binder: 9749:9752 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:03 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c40000000003c105517a8263e5868e1c281c64649e339d27326570405f960"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) socket$nl_route(0x10, 0x3, 0x0) [ 1342.765575] binder: 9722:9723 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1342.794854] binder: undelivered death notification, 0000000000000000 [ 1342.852283] binder: 9760:9762 ioctl 6609 0 returned -22 [ 1342.858176] binder: 9760:9762 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 583e26a81755103c != 0000000000000000 [ 1343.605486] binder: 9760:9763 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1343.612558] binder: 9760:9762 ioctl 6609 0 returned -22 [ 1343.618030] binder: 9760:9762 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:06 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:06 executing program 5: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) r2 = dup3(r0, r1, 0x80000) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00042abd7000ffdbdf2501000000000000000741000000140018000000067564703a73797a3100000000ef0fc13981911a7953862b2dfc22539bf919b789e0e42741fe9715ebc7faa2cffbb7058aa26965c2b15a0634d7af841710a83ee8d703a41a4e93ba3caa7d54a1bcc7c3c31ae498c2feea6e27cf387bc718e168cf8ff565f4b3fa088b61593ae82ab0"], 0x30}}, 0x4000000) 17:06:06 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) sched_yield() keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:06 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x10000, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@hci, &(0x7f0000000100)=0x80, 0x80000) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x101800, 0x0) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x76, 0x8}, 0xc) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000280)='cpuset.mems\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000580)=[{{&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000340)=""/9, 0x9}, {&(0x7f0000000380)=""/194, 0xc2}], 0x2, &(0x7f00000004c0)=""/176, 0xb0}, 0x400}], 0x1, 0x100, &(0x7f00000005c0)={0x77359400}) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000600)='/dev/full\x00', 0x200000, 0x0) r7 = syz_open_dev$rtc(&(0x7f0000000640)='/dev/rtc#\x00', 0x6, 0x4000) r8 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000680)='syz1\x00', 0x200002, 0x0) pipe2$9p(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000700)={0x3, 0x8b, 0x9, 0x0, 0x0, [{r1, 0x0, 0x6}, {r2}, {r3, 0x0, 0xff}, {r4, 0x0, 0x3}, {r5, 0x0, 0x10001}, {r6, 0x0, 0x800}, {r7}, {r8, 0x0, 0x8d2}, {r9, 0x0, 0x3}]}) r10 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r11 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r10) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r11, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r11) ioctl$BINDER_WRITE_READ(r10, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:06 executing program 1: exit(0x6) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$poke(0x5, r1, &(0x7f0000000080), 0x4) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:06 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) 17:06:06 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) 17:06:06 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:06 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(r0, 0x34) 17:06:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:06 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x40001, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = socket(0x3, 0x2, 0x2) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x68) close(r0) 17:06:06 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) [ 1345.617638] binder: 9767:9768 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1345.646712] binder: 9767:9768 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:06 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r1 = getpid() capget(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x4, 0x8001, 0x0, 0x5, 0x7, 0xfe}) 17:06:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1345.700695] binder: 9802:9811 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1345.708779] binder: 9802:9811 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:06 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) syz_open_dev$sndtimer(&(0x7f0000000140)='/dev/snd/timer\x00', 0x0, 0xd290d42fad0f0f) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) getegid() r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$P9_ROPEN(r1, &(0x7f0000000180)={0x18, 0x71, 0x1, {{0x10, 0x3, 0x6}, 0x3}}, 0x18) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f00000000c0)=0x14) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000040)='/dev/ashmem\x00') close(r0) 17:06:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630c3fffffffe8"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = gettid() r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xc0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0x6, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x9, 0x5}, 0x0, 0x0, &(0x7f0000000200)={0x5, 0x0, 0x1, 0x7}, &(0x7f0000000240)=0x6, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=0x401}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={r2, r3, 0x0, 0x28, &(0x7f0000000100)='systemvboxnet0:wlan1cpuset::user%em1em0\x00', r4}, 0x30) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1345.742952] binder: 9829:9830 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1345.752359] binder: 9812:9831 unknown command 536872576 [ 1345.756255] binder: 9829:9830 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1345.777165] binder: 9812:9831 ioctl c0306201 20008fd0 returned -22 [ 1345.812696] binder: 9844:9845 unknown command 1057776398 [ 1345.818558] binder: 9844:9845 ioctl c0306201 20008fd0 returned -22 17:06:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000640)='smaps_rollup\x00') getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) getsockopt$IP6T_SO_GET_REVISION_TARGET(r1, 0x29, 0x45, &(0x7f0000000680)={'IDLETIMER\x00'}, &(0x7f00000006c0)=0x1e) keyctl$setperm(0x5, r0, 0x200000) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x30, r0, 0x0) close(r0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='cgroup\x00') 17:06:07 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) syz_open_procfs(r0, &(0x7f0000000040)='net/ip_vs_stats\x00') r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:07 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)='syz'}, 0x30) capset(&(0x7f00000000c0)={0x399f1336, r1}, &(0x7f0000000100)={0x5, 0x4, 0x5, 0x0, 0x3}) 17:06:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:07 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r3 = fcntl$dupfd(r2, 0x0, r1) ioctl$PPPIOCSCOMPRESS(r3, 0x4010744d) [ 1346.481119] binder: 9853:9859 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1346.518568] binder: 9866:9869 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1346.614181] binder: 9844:9877 unknown command 1057776398 [ 1346.619691] binder: 9844:9877 ioctl c0306201 20008fd0 returned -22 17:06:09 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) 17:06:09 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r1, 0x4c09, 0x20) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:09 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') getsockopt$sock_buf(r1, 0x1, 0x1f, &(0x7f0000000180), &(0x7f0000000140)=0xfffffffffffffd86) r3 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x5, 0x13, r2, 0x0) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f0000000040)={0x1000000000000009, 0x20, 0x11a, 0x80000001, 0x4, 0x38}) close(r1) 17:06:09 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000c00)={@remote, @empty, 0x0}, &(0x7f0000000c40)=0xc) sendmmsg(r2, &(0x7f0000001540)=[{{&(0x7f0000000000)=@sco={0x1f, {0x7fffffff, 0x6, 0xfffffffffffffff9, 0xffffffff, 0x8, 0x6}}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000140)="96925148b1717ec5e3fb8b58cf20d5f6acbb71c97c497daa8653ec523d902642e312381ce67fcf1b81e71e4d3da16834b0ffbde874570dedf62c83967da741bf229bcd6f40ca267a9ebebe7b5d533c318f292e8887e027595ad0e6da7c5d3c208d3010091f352572eabcfa980d6977956e6b30ab2328d5386a1b649831936dedcff025b116fc070f9124bcf306fd609bf4cc91de", 0x94}, {&(0x7f0000000080)="a88ba56fb212f6383807c4ff43ff4e8251f74b437de49af89cb307d3a3595ef5554c212f0c04d0dde46f6bf2964b94bb9fe6c19532e05b6881", 0x39}, {&(0x7f00000000c0)="af364e5416da", 0x6}, {&(0x7f0000000200)="4257d2308a2bdfed2edf09eb774f9fbd20933802fb3e2510caa7e183bd53ce63c734efea6ae0e18e7c7294eaf19f4e1bcf88b4c61e198da34ce46ef4a6b9dfdfb79bb6a18bfc3e7c21b84cbd131f7667761599ed50e89c6d395eb8514eeb6bdf123614d7870c5b560397130ee3077e873a55dcd39359eb52379f0bdbcaaba32fa4baaf211e9f2aca5d9d2f9476b5b7b22fae2d10177641ccb8f4a4fac9de9a6cfa9213f60f12a365c43c4beba1277fb339155bb27993f5188a3aae059fbdfc7a67b045a1825e24699de4c46e8a4130491cb0fc6a9f7af13b47f772fa92e0e329bbb3df", 0xe3}, {&(0x7f0000000300)="db43686590808465ee6b37c2378a8179d7200dbf3393eec06350bec2265de56208f49d96b1ecd629f490221af7c7d33f66980971b1eb21ea141db5a280586df6a53a7846dcc92a1ea475b8e7dc853c6a28b114c031e5e09e7bde5dd4d5a23faa16f14aadb5b87b0594889a58580ab754f3ac9c98257cc9f41e9f39d32911d4c0139d9f9037b2a2e12fc00274c2e137eefc8b77f3c6f27cce15c419d4ea7265e5a29cc4b564efd65604724f7ab05bdc8f69a613da47b6e86307f54356f111235092274b880f25e2e82cd70e62c6c4f5ccfa17bcd22a411824befc", 0xda}, {&(0x7f0000000400)="7e4d460335e3b1b54dc45e3859cda3e2d5cbb1e7ab49c43e1e3e711caca659d18a9baf8411706c695db78d78f19332494e1cef86ff6b3d9efa9ce8fe20fea4af067aa72bed1d14cfc5b8aab36a4d1e5d1a2a7641adaed63f3c9146dc07865b53fe8bd28365e68bc2a8376567f9b8ad3e335f419aff996d9c29eb592ba84595cc4bf02f017446d06018a775d05c39c6557e5a465a4d3f9ec49045b4e8d7df6d89e3369742228ba6839ccb69b23f3271d6254ffad1dd458013f5057045f6f4f25f2cc1187d79fd0cddb892caeae44cce9a098bf289ef", 0xd5}], 0x6, &(0x7f0000000580)=[{0x50, 0x101, 0x7, "581b0c8a5e60985ad55fca7e0adc4441fabfbecc8603d95d104ec83e0e233a4dd15122feaecfe10e4997acf851374d68d739993bd4ee8d7ff8678ddd"}], 0x50}}, {{&(0x7f0000000600)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x0, 0x4, 0x3, 0x2, {0xa, 0x4e21, 0x10000, @rand_addr="9a6fbfb528cc1a6f82b4241b1b92c0e0", 0x40}}}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000680)="f8b783c5f2797d0eca5c598655891a8f22ac985ffd0e3b85026529ee208fd9c4636a7d1f4dc5c7500f337a644ed80ac68f1e5f243be1633af7e3f18a9ab939450bf2d6355c229c304b933d91a586e08668e1b3c9441cf5354923224a3e13aae6fdded0779c97eaca91392ff2be560ea948b92270d9b4a2e4d39d36eb25103d3ed0146710d3914cc7a92284dc624ff4", 0x8f}, {&(0x7f0000000740)="33ee18020d5d5d5cbdb67b3f400ecab3d004713ccedd9af175c25ddd5e5bc5cd3ca9b24d79d65df038de63d5fddadd57c4d9a190dd9c901f902f4217dbeb67a24ce68d389304c7c4143a4a1c682808d5496c", 0x52}, {&(0x7f00000007c0)="d6111d66f84263e017f7b20bd8a46f9da5a267dd19decdbb0df1bffe688c9260fb29a3d090833b9a6e3652880e61a2fd8e7f37c6b73de2010c2255f5e67bed943af14003248a088dfac3081a839af5f0b56d24033f1cf88c7513ae7c", 0x5c}, {&(0x7f0000000840)="2211e9ce232d1ce09541cc6645d5c02fa60217d655e6c80aeed93e1620e62986b6f4ceb7bf4c35973f532c93aa1c68cb985e11619a489934276ae20e0fa1cb1f0eef247161c630daf8141e3d9e4a466bd36e534fa620a7cb0233317429593d13d3eba2de70b2bceb843602bd12fdc68ab947dba6ce2d5428c742a893674535a5d66957909a43861a0ab9e9e2730031bc9c67fbf0b7eb04a1e25af544e68de04cf65f8bcb9e724a98e4a7372b0f973d71485a", 0xb2}, {&(0x7f0000000900)="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", 0xfe}, {&(0x7f0000000a00)="b18aa6af5a072f80d30b4ee24bfba35c52a035d5a6a6d8b2c1", 0x19}], 0x6, &(0x7f0000000ac0)=[{0x58, 0x187, 0x3, "258fba1f9ec3d4d13e9d3f65c78815f149a9a242e5fea8cee9165db7e449d8369e73a41253fcdda1aca627bd9c773bf604b3bbaf570ebb531d407dde0f668f0efbef5299bba573eb"}, {0xa0, 0x101, 0x3, "da4cccbda825299a8c70f0bc667bbdf10b899ffcf95d1c30e9690a1fabd82c4deed2e68acc96cbe2e2ad190d6504bb81fda54043d5f64218dc15abec6a4bca332a13e5b2f55777aa569561908136ca68f42c2817d4ce115e4506b9fe15c0ef9d7a2d0f65ac1b5331c1abccb31e0b6ccf6109c8ae1b6754ac9a4cd876196c9b3ab265ecd79430a074e43d2cd15a"}], 0xf8}}, {{&(0x7f0000000c80)=@ll={0x11, 0x15, r3, 0x1, 0x0, 0x6, @broadcast}, 0x80, &(0x7f0000001100)=[{&(0x7f0000000d00)="211a8f7bbfd5e07f995a0c6fa2d296a001cdb19c1a1881fb04ee0f586f730fbcfe9835fa53e386b60027ca", 0x2b}, {&(0x7f0000000d40)="e2bc9429e9021865639b17007eea8feb7dfef7dd5da1f95011892b16b39cf36ccbf8866052481f1d2968e47f86e5c9052c4d6816a564a063d68e2e3a3d0a1c4a58a379c4c40a098db3ff54abb4d461ae1f8fa7e39fe8e3eef74da3a53c96831872698444245301e68ef0a6e766f654c0cdffe5820f7aafec6ea2a977a7c8b9d1cd97d5a2f1720574d5bb6254f55056effebb0f9bc31763d417b950de6b8c67081d4e84ed6876", 0xa6}, {&(0x7f0000000e00)="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", 0xfc}, {&(0x7f0000000f00)="eac2a5ba2a35bf911c03017a44df20d2dd5ec6287880013725cb7255b723ba20c85ed5cd986c3e96c6b6c582f088546959270a47e9153db1efad905d01ed1ebf", 0x40}, {&(0x7f0000000f40)="3102f6485edde43c05dc3bd07937fa51bf1b06ae8196998d27e91272bc0165d217cbfb36e3cfd2882864bcd1dbbf659af4b5b9b0830a63a318c3d150ce883d8fee", 0x41}, {&(0x7f0000000fc0)="f149c7b72c357203c11529d15d24ce777c3d10db8f212239b3317fd05c86c73092f8a7d7d65f472997fd8bbcf51e26daf18c9b31e48a997c8ce422928da5caae4d", 0x41}, {&(0x7f0000001040)="a7ee50da91965f5aa7201a07ef55eb9e7875896a17f63cfd34f22b2914aeb282a143818f822685b3ff5e6d1f6e4a1d78e5ac414a08e6769b7d9cba60f1e23c229ecd76f4278e8e68e151ad4e32faa04725cd46c6aec284452d1fcd40ce370a4e82d0661029c272d67d96513e0b2e9b58b6f5f5fd2a24bc7c00983f043b6dff49537565c23578e672adbd69ff66ad62d2a47b5883cdafdf", 0x97}], 0x7, &(0x7f0000001200)=[{0xd8, 0x88, 0x1, "d51794ba3c4fb8e794dc43a6a6bd4a0c6a2c31e9444361059f96654dfd3c8be81a0b99a1d3eafc18443956ba735288ca6dd2417a70549b920037bc32cef2c3d8eedcdcdbdec69c5f0baff197f26aafb6edac5389328a984898aa88affa0d3de5e4f110b82a7953b4e853e9ecb349d5cfe76a07e714864c06b716fc3470a699a7bfe5f8436a55f17568d253501776e854c81a17502b2a336d3d257645a5f8fdd48a569af531d7416b0b62aa2c8879294d83286c82128f7c750bb37021cdb272bbd41d2c"}, {0x90, 0x0, 0x5639dc3e, "fe67a284c62651acf8e2bf4f3d907349dc1f1aee84d6b16a93997a6ce4dc59a5a6acf81ea09ce27dfb1c69aedc16849c2b602b7608b6865a96241e4f6c38c43de49e756a87d4bcf67e5b92082997469f76c4533b312e589eb68f44f5abfe2aaaa8b09edad2d6e14477221d92c0508d5844a4cc92398c5b4a1497d14a"}, {0x108, 0x88, 0x8, "a9c2d243da8179c056278091ac12ed7de84449cba30d2bc8bedf8db36d2ea0a6974595a5321aa118e9bcd990fc94d8453854c482f527d8c492c8d25af065c9a0f01d2108617a2a2677be12ebc6a5d44649510e5ecac1a8292f917a606f792d82d6a1efb95b5b42d477ca04de1a87c72a33a98364619f0f9a433bddd2cb592aa383d27b1bdd3cbdd52db03fff24ec55842594701a43003735e9d1be51c396b56c2090125c75d59d0bb2524ecd343a6000f24a31aff6bcb1d3aa5d4a4aeee470a42783c728ce2f6cd23d9ed466a6104ce71e26fa02acf6eabf1e8d43c99a80d03bc96e5dda238e8e492064ece0209610889040"}, {0x98, 0x109, 0xfffffffeffffffff, "0a9991eb5b9df0ae52eadc7bd94d29aa7ffdab9156af868028360b6392acc2965730dfede3df31f00a6753a7f9984d0e028aa2af8acefcec8df3a0b329abd176042de1cb55fb3f27f5ca876bb6af37cc43903d4f28d1f9f96c95d62dabbe3e4fd85ede92eab8e67abbb56615766b7127a3a6d68b8a42a2480f8baa46b16fe6019b4d773a"}], 0x308}}], 0x3, 0x804) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:09 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:09 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000080)='(ppp1!GPLvboxnet0keyringvmnet0&\x00') close(r0) 17:06:09 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) shutdown(r1, 0x1) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x5, 0x40000000008005, 0x80000001}}, 0x28) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) waitid(0x1, r2, 0x0, 0x41000002, &(0x7f0000000080)) 17:06:09 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x4002, 0x0) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f00000000c0)=@gcm_128={{0x304}, "882ef431d7d2aaa2", "610e4f377ee8df4dfa6ab2e598ddedf9", "670a4913", "acf05c4a9b991960"}, 0x28) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1348.702562] binder: 9883:9885 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1348.738050] binder: 9893:9895 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:09 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x8) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) write$P9_RRENAME(r1, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) keyctl$get_security(0x11, r0, 0x0, 0x0) r2 = request_key(&(0x7f00000000c0)='dns_resolver\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='syz', r0) r3 = add_key(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="4fb64f71edc7fa0eb446bd99c054eaedf561efcab7de44e3d3c06aa6ff894169c0e8f44e1deab6ca68382bd37fa07beefba81918748014815d040cc73f1b0d65cf35bcd5ea1c431ca7e64bf0d3d1316662e4dc1b7b2c56185518fed62dd695e760cf7cd5c518fd148e636d957ce713360a663c1761cfa9d3ee34df547038a2ae6bae149fac5cf4275d30f8983075d175debc347c", 0x94, r0) r4 = request_key(&(0x7f00000002c0)='syzkaller\x00', &(0x7f0000000300)={'syz', 0x2}, &(0x7f0000000340)='security\x00', r0) keyctl$dh_compute(0x17, &(0x7f0000000380)={r2, r3, r4}, &(0x7f00000003c0)=""/183, 0xb7, &(0x7f00000005c0)={&(0x7f0000000480)={'tgr160-generic\x00'}, &(0x7f00000004c0)="486fad5b49e59e2a41234fa89f573080be6028ef083f9a7d8cfa6f7aefefa4436cae32edd7773d841be1572d2d945b3b2be64914101d841b04e53bc33a4431c75ba68dc4185ba1d756d37777988f6fc960b7105c22fa4e732f1e4e90aaecc178e8fbaf54bd1e5ca856df15dd57ea3f80e0a79f57426b92c64e21729ae0657803bb42990caf0da42c8557ff3a10047dabd38a60da2422c51afcf61bb1fcf1e2d5b98d1b30631212bb6d6eff11f30f7e357dc6ba7e975aa9052acbe95367e018a75b656900e7b65a750060254f5cee9aa6ef587d41fa6bf6c60e2fa82f3ebdf8810efb5c6246780b4ff680", 0xea}) [ 1348.801150] binder: 9908:9913 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1349.642483] binder: 9922:9924 unknown command 536872576 [ 1349.648149] binder: 9922:9924 ioctl c0306201 20008fd0 returned -22 17:06:12 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(0x0, 0x34) 17:06:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x20414) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r1, 0x10e, 0x5, &(0x7f0000000040)=0x4, 0x4) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:12 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x100000001) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r2, 0x89fa, &(0x7f0000000000)="9f29477363a67ae2e585001bf2636e2965ecd26da189b6ad50465c6beb8e4eeecdcc7f6a2817d4390dc352a1d832586e53a62f3956a8e96b37c2123a1360cc647ea50ff39c93c2db174d68e85d51b78d4a74b8fbcf2f81c4dd703c428eaf9cc71eed40d84bf795a4f16bb3cb5d33a4ea8db4386ac78bce3d5c2f894887c0d01e62aef7559974c3fdcc1074ff2fbc0346fbd63a48f7066c75d1fcf9605694fbcc4c0a7eb760e46aad28a8792b52b9912b99d8529859e4645869fc0b490efa234e753f82") ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:12 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = getpid() sched_getaffinity(r1, 0x8, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r2) 17:06:12 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x13b002, 0x0) write$FUSE_NOTIFY_STORE(r2, &(0x7f0000000100)={0x2e, 0x4, 0x0, {0x4, 0x1f, 0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x2e) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = open(&(0x7f0000000340)='./file0\x00', 0x42, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f0000000380)=0x7fff, 0x4) keyctl$setperm(0x5, r0, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0xfffffffffffffff9) keyctl$get_security(0x11, r0, 0x0, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) keyctl$clear(0x7, r0) 17:06:12 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 17:06:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:12 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x1) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r2, 0x200, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x800) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 1351.742079] binder: 9931:9938 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1351.778838] binder: 9948:9950 ioctl c0306201 0 returned -14 17:06:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:12 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x100000001) close(r0) [ 1351.784936] binder: 9948:9950 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1351.835883] binder: 9959:9963 ioctl c0306201 0 returned -14 [ 1351.847428] binder: 9959:9963 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:15 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) 17:06:15 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$setperm(0x5, r0, 0x1000000) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000040)={r0, 0x1000, 0xa6}, 0x0, &(0x7f0000000080)="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", &(0x7f0000001080)="d877dae6760d9f97573d59e80df6a322729597511db0b75e9b7f6d9290605d0a401d90de57be9498200ad02caf173e6c3ecd83c4e0cdbb0fbb4b5ca2c1e13e61bdcb584efe0750f0043825df1c11b0a5e197c42b4a72282379161c72662eeeb6007f65fd783bfea76d896df26e31713415198f254d8771e3a6c96bca7c4954c2e33afdab05af78cbb2a60ba7ab471842e0628d4c6dc9d47565b7cbf677449c36f335b862a230") 17:06:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:15 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x1000000000000000, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCNOTTY(r1, 0x5422) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xe229) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') fcntl$setstatus(r2, 0x4, 0x40400) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000040)=0x10000, 0x4) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000080)=0x0) getpgid(r4) close(r0) 17:06:15 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\x9c\xc8\x9aT\xcb\xf2\xd0r8\xca\x1e\xdd\xc2\xfc4{3gjb\xe3\x89\x05\xa6\xed4\x01\xf6U\x90rj\xa3\xc6\n\x99\xd9?7\xack\r<\xfc\x13\xd2`\x06\xbc\xd8\xd4qQj\x8c\xc0 a\xd1\xc6\xf1\x9cW9\xb1\xd5\xc2\xad\xeb\x82\x80\xbb@\x1b\x8b\xae\x19\xb1B\x8f\xa9\xc0|\xaa\xd9V\x00\xfe\xc7\x85\x89~\xa4s#&\x9c\t\x91\xfeO\xaa6(\xe1\xd9k\xe7&\xac\xec\x8f\xad\xde\x80\xf9\xf7\xcdxd\xaf\x91\x89+\xdf\xec\xcd\x89\x80\xad\xcf\xbe\x00\xa6\xf1\xe5\xbf\xedR\x10\x9a\x02Ss\xb9\xc3\xbdV\xbfX\xd1,\xcd\xb1\xa2\'^\x8d\xc6\x11By\x94\xf4\xc9\xe4\x9a\x11\xce;\xeck1\xbd]C`\xf8H\x83\xd6\xad\x03\xbeG\xd4\xa1;\xbdU\xc19Y\xa3:\x9e.\x9cE\xf8\xd0Iv\xd5\xe19\xde\xf0\xfe\x01\xe1\x81\x99\xff\xcb\xb6\x84/\xb2\xce\x9e$8\xfd\xc2\xa1\x01\xf9\xebqJ\x90\x8d!\xd7GK\xc0\xb8\xc2(^\xaf\xfd\a\xa9\xe5a\xde\xfa2\x1dL\xf1\xb9-\xf8\x98\xf6%7\x00\x90v\xcc\xf3\x9b%\xbd\xf1\x94>\xd4:?)\xf6\x9c\xbd2\xb9\xc5\xa6\vc\a\"\xc2U\xc1\x0e\xb4D\xe7\x14P\xaf(\x12X*\x83\x80\x06\x88\x0fzPz\xb4\xa5\xbd\xa8-O\xc7M\xbfst\xd6\xd19\x91\xf3\xe6Y\xc7\x01\xb1p\xbdn~\xdepAG\xb0q\x1aL\x91K0\xdc\xc7\xe9\x87\xc8\xd0\x9a\x1ft])\xa9\v)Qp\xe3j\x7f\xa9\xbf\x18\x83{\xa9\xc5\'O\x03\x82\xee(]\xad\xae\x86\x06\x8f~\xd1y\x96 \x8e\x8c\x16\xf3\x9c\x9cq\xeav:.\xa9\xeb6\x01\xabq/\xa8$\b\xec(\x9f\xf67\xfc}\xb6\x03\xe1\x0e5\xb5|\xb8l%\xed\x03\xc5\x87\xfb\x954/*\xf8\x9e\x8f\xac\x8e\xd8I\x9a\xf3\xbb~\xd7\x16\x12\xee\x18\xeb8\x19\x90\xf31\xb9\xbd\xe1V\x95\xc8\xc4\xc0\x10*\xb9\xdf\xe8@\xe0\xd4 \x1b\x92\xa8\xc5\xf2\x9aNX') close(r0) 17:06:15 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) rt_sigpending(&(0x7f0000000000), 0x8) 17:06:15 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x4, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000000)={'rose0\x00', 0x56}) close(r0) 17:06:15 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x0, 0x0) fcntl$setlease(r1, 0x400, 0x2) ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)}) 17:06:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1354.747189] binder: 9978:9980 ioctl c0306201 0 returned -14 [ 1354.761028] binder: 9978:9980 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:15 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) 17:06:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:15 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000040)) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1354.796940] binder: 9995:9998 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1354.865589] binder: 10007:10017 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:18 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) 17:06:18 executing program 1: arch_prctl$ARCH_GET_CPUID(0x1011) r0 = add_key(&(0x7f0000000140)='id_legacy\x00', &(0x7f0000000180)={'syz', 0x3}, &(0x7f00000001c0)="7437a4c72895acd4d6af83f17c9781012d340d3488856447351adf959b1518833389a385551696fa40475087092819c9a498bcc3f8a156aabe1348ff6ae6b84dd5d243afdfbbd5804b0a483bbbd5be68ba771bc4376b3d8878bdf0f87e820c424dcece6400582b4732a4aa8d531944631ba1985588b792a9166bfed8249911c7bb5f6cb6962bd89102995b40c02f74392eb22ec16521fbc626caaade1bb77e37f1442abb326a6017ff20df6877", 0xad, 0x0) r1 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vga_arbiter\x00', 0x101500, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000400)={0x10, 0x7fffffff, {0x51, 0x8, 0x7f, {0x1, 0x100000001}, {0x1b5c, 0x37c1}, @period={0x5d, 0xb9, 0x7f, 0x80, 0x0, {0x10000000000000, 0x3, 0xfff, 0x4}, 0x6, &(0x7f0000000380)=[0x1, 0x200, 0x9, 0x20, 0x5, 0x6]}}, {0x52, 0x7fff, 0x8, {0x81, 0xcb50000000000000}, {0x1010000, 0x7}, @period={0x59, 0x6, 0x401, 0xe0c, 0x0, {0x7, 0x0, 0x7, 0x4}, 0x8, &(0x7f00000003c0)=[0xde, 0xfffffffffffffffe, 0x7f, 0x7fc00000, 0x7, 0x5, 0xb0, 0x6]}}}) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x2fe) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x2) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000340)=0x2d7) r4 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x424000, 0x0) ioctl$VT_DISALLOCATE(r4, 0x5608) ioctl$PPPIOCSMRRU(r3, 0x4004743b, &(0x7f0000000280)=0x63b6) ioctl$TCXONC(r4, 0x540a, 0x7fffffff) ioctl$BLKFRASET(r3, 0x1264, &(0x7f0000000000)=0x2) ioctl$TIOCCBRK(r4, 0x5428) 17:06:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:18 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000040)=""/114, &(0x7f00000000c0)=0x72) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') ioctl$EVIOCSREP(r2, 0x40084503, &(0x7f0000000000)=[0x6, 0x9]) close(r0) 17:06:18 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x3, 0x0, 0x3, 0xc, 0x0, 0x0, 0x0, [@sadb_key={0x2, 0x9, 0x8, 0x0, "e5"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x60}}, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000001c0)=[@release={0x400c630e}], 0x291, 0x0, 0x0}) r4 = getpid() sched_setparam(r4, &(0x7f0000000180)=0xffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r5 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) sendto$inet6(r5, &(0x7f0000000100)="c4e9a2d7", 0x4, 0x0, 0x0, 0x0) 17:06:18 executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xde, 0xde, 0xc, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x5}]}, @var={0xf, 0x0, 0x0, 0xe, 0x4, 0x1}, @const={0xd, 0x0, 0x0, 0xa, 0x2}, @const={0x10, 0x0, 0x0, 0xa, 0x2}, @datasec={0x9, 0x2, 0x0, 0xf, 0x1, [{0x1, 0x3f, 0x1}, {0x1, 0xcc5, 0x7}], 'c'}, @datasec={0x10, 0x5, 0x0, 0xf, 0x1, [{0x3, 0x8000, 0xffffffffffffff7f}, {0x1, 0x3f, 0x40}, {0x1, 0x9, 0x2}, {0x2, 0x1, 0xfe000000000000}, {0x3, 0x80000000, 0x7fffffff}], "f0"}, @typedef={0xf, 0x0, 0x0, 0x8, 0x3}, @const={0xf, 0x0, 0x0, 0xa, 0x2}, @typedef={0x10, 0x0, 0x0, 0x8, 0x5}, @var={0xc, 0x0, 0x0, 0xe, 0x2, 0x1}]}, {0x0, [0x30, 0x5f, 0x61, 0x5f, 0x0, 0x61, 0x2e, 0x7f, 0x30, 0x0]}}, &(0x7f00000003c0)=""/21, 0x104, 0x15, 0x1}, 0x20) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000440)='/proc/self/net/pfkey\x00', 0x400, 0x0) r4 = geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) write$FUSE_ATTR(r3, &(0x7f0000000500)={0x78, 0x0, 0x5, {0x4, 0xffffffff, 0x0, {0x1, 0xa7d, 0x8000, 0x9, 0x7, 0x1, 0xaa, 0x2, 0x1f, 0x5, 0x8, r4, r5, 0xffffffffffff3e80, 0xfffffffffffffffe}}}, 0x78) r6 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x400, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000240), 0x1, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000080)="5f82b31a999267badda8822fb72257fedb7726c6f4ddaf57741c13837817b7af78f41b7f5649a51e91e383c15c017056de43", &(0x7f0000000140)=""/255}, 0x18) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000000000)={'ipddp0\x00', {0x2, 0x4e23, @multicast2}}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:18 executing program 1: prctl$PR_GET_KEEPCAPS(0x7) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_SET_PDEATHSIG(0x1, 0x33) keyctl$setperm(0x5, r0, 0x201000000000000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080), &(0x7f00000000c0)=0x8) keyctl$unlink(0x9, r0, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100, 0x104) ioctl$RTC_PIE_OFF(r2, 0x7006) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000140)={0x200, 0x4, 0x10000, 0x2f7a, 0xf, 0x1, 0x5, 0x80000000, 0x3f, 0x80000001, 0x100000001, 0x7}) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$unlink(0x9, r0, r0) r3 = syz_open_dev$sndtimer(&(0x7f0000000040)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) 17:06:18 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) getgid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1357.767978] binder: 10025:10029 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:18 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x0, 0x0) fremovexattr(r1, &(0x7f0000001140)=@known='trusted.syz\x00') ioctl$TIOCMIWAIT(r1, 0x545c, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001180)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6}}, &(0x7f0000001280)=0xe8) fstat(r1, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000001100)) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f00000013c0)='SEG6\x00') sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f00000014c0)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001480)={&(0x7f0000001400)={0x68, r4, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x100000001, 0x30]}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x50}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x401}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x7}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x800}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_ALGID={0x8, 0x6, 0x1}, @SEG6_ATTR_SECRETLEN={0x8, 0x5, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) write$UHID_INPUT(r1, &(0x7f00000000c0)={0x8, "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", 0x1000}, 0x1006) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:18 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') socketpair(0x19, 0x1, 0x7, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x7, 0x4, 0x4, 0x20}, 0x14) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) r4 = dup3(r1, r1, 0x80000) ioctl$RNDGETENTCNT(r4, 0x80045200, &(0x7f0000000000)) close(r0) 17:06:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1357.815165] binder: 10043:10045 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1357.862856] binder: 10060:10061 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1357.905121] binder: 10048:10071 ioctl c0306201 20008fd0 returned -14 17:06:21 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x0) 17:06:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x20000000001000) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) write$cgroup_type(r1, &(0x7f0000000080)='threaded\x00', 0x9) 17:06:21 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:21 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r2, &(0x7f0000000300)={&(0x7f0000000080), 0xc, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="97cec2f144011a00", @ANYRES16=r3, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) fcntl$getownex(r0, 0x10, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:21 executing program 0: r0 = creat(&(0x7f0000000980)='./file0\x00', 0x100000) setsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000340)="78661108bc77eeca2b75bfaced000972058e2327dd8f175ce8f1f484dd0f10ce06e909c5b8c16453d7d8078b9badc261a267b92ac545b20d11ac651e61a0eac83a79", 0x42) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f00000002c0)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0e630c400000000017cf62ea00957105477ea5da8016a93589d05cf4e9f7a579ec85deca3cc7d15e8a27263606f11593138b0a0b"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000940)={0xb8, 0x0, &(0x7f0000000880)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000600)={@fda={0x66646185, 0x4, 0x0, 0x1c}, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/255, 0xff, 0x0, 0x11}, @flat=@binder={0x73622a85, 0xa, 0x1}}, &(0x7f0000000680)={0x0, 0x20, 0x48}}}, @acquire_done={0x40106309, 0x2}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f00000007c0)={@ptr={0x70742a85, 0x0, &(0x7f00000006c0)=""/137, 0x89, 0x0, 0xa}, @ptr={0x70742a85, 0x0, &(0x7f0000000780)=""/52, 0x34, 0x2, 0x28}, @fd={0x66642a85, 0x0, r2}}, &(0x7f0000000840)={0x0, 0x28, 0x50}}}, @increfs_done, @decrefs={0x40046307, 0x1}], 0x1000, 0x0, &(0x7f0000001040)="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"}) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20000, 0x0) getsockopt$inet6_tcp_int(r4, 0x6, 0x19, &(0x7f0000000100), &(0x7f0000000180)=0x4) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000400)=0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000004c0)) ioctl$BLKTRACESETUP(r4, 0xc0481273, &(0x7f0000000440)={[], 0x1, 0x80000000, 0x0, 0x8000, 0x2, r5}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r6 = dup(r3) ioctl$ASHMEM_GET_PROT_MASK(r6, 0x7706, &(0x7f0000000200)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c4000008f400000000000000000"], 0x0, 0x0, 0x0}) fsetxattr$security_smack_entry(r6, &(0x7f0000000240)='security.SMACK64MMAP\x00', &(0x7f0000000280)='++em1security/md5sum:\x00', 0x16, 0x2) openat$full(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/full\x00', 0x40000, 0x0) 17:06:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:21 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x12000, 0x0) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000703000/0x1000)=nil, 0x1000, 0x4000300000c, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:21 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$read(0xb, r0, &(0x7f0000000140)=""/248, 0xf8) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$setperm(0x5, r0, 0x4000004) keyctl$get_security(0x11, r1, 0x0, 0x0) r2 = gettid() add_key(&(0x7f0000000280)='syzkaller\x00', &(0x7f00000002c0)={'syz', 0x1}, &(0x7f0000000300)="e3c0a7ac7f35149acd7450f8b7fee60e1b04eb3734bcf8c625d0f31e7c09ff93c1e99cf4156066ed09b3ef635d2eb674867535", 0x33, r0) getpgid(r2) r3 = open(&(0x7f0000000100)='./file0\x00', 0x410200, 0x30) ioctl$TIOCGPTLCK(r3, 0x80045439, &(0x7f0000000240)) [ 1360.779427] binder: 10085:10088 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:21 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x200, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x2) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x0) [ 1360.826764] binder: undelivered death notification, 0000000000000000 [ 1360.869313] binder: undelivered death notification, 0000000000000000 [ 1360.930837] binder: 10087:10129 ioctl 7706 20000200 returned -22 17:06:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:24 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x2000000, 0x400000000012, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) read(r1, &(0x7f0000000040)=""/67, 0x43) 17:06:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getpgrp(r1) keyctl$get_security(0x11, r0, 0x0, 0x243) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) setitimer(0x3, &(0x7f0000000100)={{r2, r3/1000+10000}, {0x0, 0x7530}}, &(0x7f0000000140)) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) openat(r4, &(0x7f0000000080)='./file0\x00', 0x141000, 0xe) 17:06:24 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000040), 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r2) r4 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ID(r4, 0x80082407, &(0x7f0000000000)) 17:06:24 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) dup2(r0, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0xfffffe5d, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) 17:06:24 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, r0) r2 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000540)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) ioctl(r2, 0x9, &(0x7f0000000580)="546231bdd864ca0f05eda886e9557967d8459e1e0447270423c9f12810f1b9e93a42eca7831144488df133913862148a827358cdcd47e830f5f12735cb3794b26260820c1f48b7c0a8c54fa74c50d0f7b56ac6bc6663db315017bf2851b91f565a9be4e6b434510617b84cace4c95e5ad194e6eac3ae4baf8b13e8962b4c8b33f36ba68f19b06d838f96d55e9272049b82928bf520ce7ce5301885eb39479d58f66b874fd34f33d6e266e8d09ac98d12b1ee2dfe36245ba3221b61e42ba5ac9f8ef506d5f162ddc89ce5d40ba6c41fd7d799df15340d247858c678dcf5c2e7afd4f84284d7cc05b3984493e0c960d76a81a729ec50bc") keyctl$setperm(0x5, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000001c0)={r1, 0xb1, 0x8a7}, 0x0, &(0x7f0000000280)="31a214cdc42bdcf83afec734c4d104ceeebd86e764ad821e18dc456eefded286c21a7b0327371efd16faea0ce2918675e7dfb00184ff589966d36fbc88124e74c80a874f4924b9c5216272618eb01b7d0c0c01c5967239a95d78e508f13c96bf79f23e641e1af92250ea8858a6fce8cdb2d9d56b148ef2758cff5efc59e2d5c8cf6e523d049a701341bdec4fbf5a4bdf5fdb206c9f33d83721b9d402f64bc897c1bba24c2140beddd059c1fa5d6ee99b10b00df2500b2aeb02de83f5f8fe200274929fb3b890d3981061d4e1cd66d81d31cce841b9f829", &(0x7f0000001380)=""/4096) write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000180)={0x18, 0x1, 0x0, {0x10000}}, 0x18) add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f0000000440)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) fcntl$setlease(r3, 0x400, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r0, &(0x7f0000000200), &(0x7f0000000240)=@chain={'key_or_keyring:', r1, ':chain\x00'}) keyctl$read(0xb, r1, &(0x7f0000000380)=""/134, 0x86) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000040)="baeffd2ed1b8af2ba6511d3d3e8652a4846fe26fb29f1be62b9dcf04c377e21b65717bdf49adb341afde0c0b119d8476935f91d4afd93723b1e35581c46c42e158fde3275d25a0b2dda1789e1925d0f3a571481a9cbcdfc99940aba8ed0713fea3c638b810f769a1", 0x68) keyctl$get_security(0x11, r1, 0x0, 0x0) 17:06:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:24 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x1) 17:06:24 executing program 1: r0 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f00000002c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000440)=0xe8) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000480)={'team0\x00', r2}) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000300)={'syz', 0x0}, 0x0, 0x0, r0) keyctl$setperm(0x5, r3, 0x2010) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fd\x00') ioctl$RTC_AIE_OFF(r4, 0x7002) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80008000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0x100, r5, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x80000001}, @IPVS_CMD_ATTR_SERVICE={0x64, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@loopback}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x1}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x72}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x691}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xbf26}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'teql0\x00'}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x4010}, 0x200400c1) keyctl$get_security(0x11, r3, 0x0, 0x0) [ 1363.791546] binder: undelivered death notification, 0000000000000000 17:06:24 executing program 4: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x0, 0x0) shutdown(r1, 0x1) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x5, 0x40000000008005, 0x80000001}}, 0x28) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) waitid(0x1, r2, 0x0, 0x41000002, &(0x7f0000000080)) 17:06:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1363.843044] binder: 10146:10150 ioctl c0306201 0 returned -14 [ 1363.854984] binder: undelivered death notification, 0000000000000000 17:06:24 executing program 4: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1363.886644] binder: 10157:10159 ioctl c0306201 0 returned -14 [ 1363.895240] binder: undelivered death notification, 0000000000000000 [ 1363.947259] binder: 10170:10173 unknown command 0 [ 1363.952187] binder: 10170:10173 ioctl c0306201 20008fd0 returned -22 [ 1364.005821] binder: 10170:10175 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:25 executing program 5: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000180)) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') openat$cgroup_ro(r1, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) close(r1) 17:06:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0xffffffffffffff3e) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000080)=0x400000) 17:06:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1364.606961] binder: 10180:10184 ioctl c0306201 0 returned -14 [ 1364.614274] binder: undelivered death notification, 0000000000000000 17:06:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='io.stat\x00', 0x0, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20800300}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x8000}, 0x20000010) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000280)={0x14c, 0x0, &(0x7f0000000940)=[@register_looper, @reply_sg={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)={@ptr={0x70742a85, 0x1, &(0x7f00000002c0)=""/66, 0x0, 0x2, 0x21}, @ptr={0x70742a85, 0x1, &(0x7f0000000340)=""/160, 0x0, 0x2, 0x35}, @flat=@weak_binder={0x77622a85, 0x1, 0x2}}, &(0x7f0000000480)}, 0x1000}, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={@flat=@weak_handle={0x77682a85, 0xa, 0x1}, @ptr={0x70742a85, 0x1, &(0x7f00000004c0)=""/18, 0x0, 0x2, 0x34}, @flat=@binder={0x73622a85, 0x10a, 0x3}}, &(0x7f0000000580)}, 0x1400}, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)={@fda={0x66646185, 0x9, 0x0, 0x2d}, @flat=@binder={0x73622a85, 0x0, 0x1}, @fda={0x66646185, 0x3, 0x0, 0x1b}}, &(0x7f0000000640)}, 0x440}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)={@fda={0x66646185, 0x9, 0x0, 0x1d}, @fd={0x66642a85, 0x0, r1}, @ptr={0x70742a85, 0x1, &(0x7f0000000680)=""/101, 0x0, 0x2, 0x14}}, &(0x7f0000000780)}}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, 0x0}) sendmsg$nl_netfilter(r2, &(0x7f0000000840)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2400}, 0xc, &(0x7f0000000800)={&(0x7f0000000ac0)={0x1d0, 0x12, 0x3, 0x100, 0x70bd27, 0x25dfdbfc, {0xf}, [@typed={0xc, 0xd, @u64=0x1f8}, @typed={0x14, 0x22, @ipv6=@remote}, @generic="c378a347eeb6d9efc18fe7e972d8a7930e6e46a4a231233ff6629a0ba55e00f87439e496f04c7def0773a4721ae52dd3d15aa80ad0e32886b8b67439108adbd7bb9d287332773c4643e8fcfad74d8e2d798e92ef273fdc2b779a0468acdce18555a28616a3fb01b22b125151fba85860829662abeeb50abe2373985afd28ff8c3eabfe151bf0e95ade6e3dc9d678", @typed={0x18, 0x89, @str='wlan0\x0f!locpusetuser\x00'}, @generic="992e4ae3b72e7d4d6261a1a956c809e7f90f4dedbb90bf643881b716a56662f8ffadffe5eb5622f611791b3bcc6a584664ff6f330245faeb0ff9ec4a176b7b02233117b0b7a6d877c9b54ced849814a55cd8635f380947ff8bbefd6e087751b8a0e42cae9808f9be71a7e1cae4f8dc7efa0493e6b482a935372d74609ef2b14ca15edae721c1cbf44c646fcd99de76df5cd8bec9b35ccbe8758b96157345b9f83fb07421278e960e0af36d98c12fecfdbbf8dd33497ffc891ce50bf30ca07d9d42da70bff0e62a0eea3dead655bc46862fc4974f6490cdb1e5c969c14f4f2b85f79ae48b3c1dfe1ac4446c0c0a6b0cce571d76a7"]}, 0x1d0}, 0x1, 0x0, 0x0, 0x20040000}, 0x24000001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) getsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) fcntl$getownex(r2, 0x10, &(0x7f0000000240)) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f00000000800000116b395700000000"], 0x0, 0x0, 0x0}) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x0) 17:06:25 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4040, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0xfffffffffffffff7, 0x4, 0x2, 0x71, 0x1000, 0x10000000}) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x29) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) 17:06:25 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x2000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:25 executing program 5: creat(&(0x7f0000000180)='./file0\x00', 0x100) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x34, r3, 0x700, 0x70bd28, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2e0}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x40085) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:25 executing program 1: keyctl$setperm(0x5, 0x0, 0x0) keyctl$get_security(0x11, 0x0, 0x0, 0xffffffffffffff94) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0xc0c3) 17:06:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1364.747481] binder: 10170:10173 unknown command 536872576 [ 1364.753149] binder: 10170:10173 ioctl c0306201 20008fd0 returned -22 [ 1364.782701] binder: undelivered death notification, 0000000000000000 17:06:25 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:25 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14, 0x800) accept4(r1, 0x0, &(0x7f00000000c0), 0x80800) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:25 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1364.843645] binder: undelivered death notification, 0000000000000000 [ 1364.865019] binder: 10210:10218 ERROR: BC_REGISTER_LOOPER called without request [ 1364.888251] binder: undelivered death notification, 0000000000000000 [ 1364.918512] binder: 10210:10247 unknown command 15 [ 1364.923655] binder: 10210:10218 got reply transaction with no transaction stack [ 1364.923665] binder: 10210:10218 transaction failed 29201/-71, size 0-0 line 2921 [ 1364.943220] binder: 10210:10247 ioctl c0306201 20000040 returned -22 [ 1364.951047] binder: undelivered TRANSACTION_ERROR: 29201 [ 1364.953122] binder: 10210:10250 ERROR: BC_REGISTER_LOOPER called without request 17:06:25 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c40000000006dc2e74116073c5c894eea44183e6ecdd37cf7dd432efb8e50ea899dcd1b2988b14ff01c6e24399aca3842a9c6ffbe6e580bc4b50b724d5b0199d25b3bae8fcebc8c2231080092a5438703cfbf8c0ed1c6f421112dd7ac3028831a8c3681f758ec327de5caa5d3147e2987670c8023db636a2413bc7d16269ae8810a32eaaa19ca4f0fe5bf58382414edff414695cd939881cd2d0a9da245cb470c"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1364.953130] binder: 10210:10250 got reply transaction with no transaction stack [ 1364.953139] binder: 10210:10250 transaction failed 29201/-71, size 0-0 line 2921 [ 1364.953375] binder: 10210:10247 unknown command 15 [ 1364.953384] binder: 10210:10247 ioctl c0306201 20000040 returned -22 [ 1364.997200] binder: undelivered TRANSACTION_ERROR: 29201 [ 1365.023785] binder: 10252:10254 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 5c3c071641e7c26d != 0000000000000000 [ 1365.777638] binder: 10252:10255 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:06:28 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getsockopt$inet_pktinfo(r2, 0x0, 0x8, &(0x7f0000000040)={0x0, @initdev, @multicast1}, &(0x7f0000000080)=0xc) tkill(r0, 0x34) 17:06:28 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) write$UHID_DESTROY(r0, &(0x7f00000001c0), 0x4) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x100030) keyctl$get_security(0x11, r1, 0x0, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getregs(0xe, r2, 0x9, &(0x7f0000000080)=""/230) 17:06:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:28 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) open(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x22) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x4001fc) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000080)='/dev/keychord\x00', 0x0, 0x0) ioctl$TUNGETFILTER(r2, 0x801054db, &(0x7f0000000140)=""/171) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') ftruncate(r0, 0x9) close(r0) r3 = creat(&(0x7f0000000000)='./file0\x00', 0x42) ioctl$BLKALIGNOFF(r3, 0x127a, &(0x7f0000000040)) 17:06:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup3(r1, r2, 0x80000) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x10000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)={&(0x7f0000000080)='./file0\x00', r3}, 0x10) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x200000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x2000000204001fe) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f00000002c0)={0x0, &(0x7f0000000040)}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80800000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, r3, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @multicast2}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4841}, 0x1) 17:06:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) recvmmsg(r1, &(0x7f0000002a40)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000001340)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000001200)=""/230, 0xe6}, {&(0x7f0000001140)=""/81, 0x51}, {&(0x7f0000001300)=""/63, 0x3f}], 0x5}, 0x10000}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f00000014c0)=""/142, 0x8e}, {&(0x7f0000001580)=""/106, 0x6a}, {&(0x7f0000001600)=""/222, 0xde}, {&(0x7f0000001700)=""/112, 0x70}], 0x5}, 0x3}, {{&(0x7f0000001800)=@tipc=@name, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001880)=""/37, 0x25}, {&(0x7f00000018c0)=""/87, 0x57}, {&(0x7f0000001940)=""/106, 0x6a}, {&(0x7f00000019c0)=""/210, 0xd2}, {&(0x7f0000001ac0)=""/24, 0x18}, {&(0x7f0000001b00)=""/107, 0x6b}, {&(0x7f0000001b80)=""/51, 0x33}], 0x7, &(0x7f0000001c40)=""/206, 0xce}, 0x67}, {{&(0x7f0000001d40)=@can, 0x80, &(0x7f0000002240)=[{&(0x7f0000001dc0)=""/238, 0xee}, {&(0x7f0000001ec0)=""/105, 0x69}, {&(0x7f0000001f40)=""/168, 0xa8}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000002040)=""/251, 0xfb}, {&(0x7f0000002140)=""/203, 0xcb}], 0x6, &(0x7f00000022c0)=""/197, 0xc5}, 0x3}, {{&(0x7f00000023c0)=@alg, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/235, 0xeb}, {&(0x7f0000002540)=""/49, 0x31}, {&(0x7f0000002580)=""/79, 0x4f}, {&(0x7f0000002600)=""/49, 0x31}], 0x4, &(0x7f0000002680)=""/171, 0xab}, 0x7fff}, {{&(0x7f0000002740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000027c0), 0x0, &(0x7f0000002800)=""/71, 0x47}, 0x800}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)=""/123, 0x7b}, {&(0x7f0000002900)=""/185, 0xb9}], 0x2, &(0x7f0000002a00)=""/62, 0x3e}}], 0x7, 0x2003, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000002c00)={0x706, {{0x2, 0x4e23, @remote}}}, 0x88) 17:06:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:28 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/ashmem\x00', 0x3, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) exit(0x3af2836b) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mount(&(0x7f00000003c0)=ANY=[@ANYRESDEC=r1], &(0x7f0000000080)='./file0\x00', &(0x7f0000000280)='bef\x81/5$\x7fs\x00\x05\xddb\xb0\x16\xc8\x9a\xd8\xdcc\n~\xc2\xbf$\xb5c\xea\x02Mu\xbc\x03@ \xe3\xe6\xa2\xd0j\\\x11\x03VTLzK\x8aO0B\a\xfe?\xbc\xd4\a\xe5\x17\xcc\xeaw\xaf\xd3E\xed\x935\x04%\xab\xa7\xc85B\xb7%8\x8b\xa5e\xc5)\xe7\xd4\xeeI\x7f\xa6oG\xac\x88\x95\xc2N\xb7O?YrR\xff\x0f5\x86\xde\xfd\xdc\xe3o\xb0Q\xd5\xe6@7\xae-L\x14A\xcf\x10{\xe9\xaf\x1b\xc2\xe8\x1e\xb6\xf8:\x9f0q~T}\xdb\xff\x94d\xfcO\x8a\xcb!_\xe8\xc0h\x19h;\x03G\xb1\x9c\xca7\x98\xbc6 \xeay\xa7\xa9\xf59\xea5\\\x9d', 0x2, &(0x7f0000000380)='+\':wlan1\x00') mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x101, 0x4, 0x0, "4a9c985d623f1d3a6822fb027bdac48f", "5d93f74b5927f759707c3ee3116aeba71055a4bc441b1be6fdee44cd28aa5e4e8a89ce4be3477258fd51f09a45792265f53221ec6d7477be4bbd07c21e9bbe65b7c58d7374b591f964bb8fd10c291a99bca6d1d12738e3299d17f1dd3808957ad3ef70df28a103bec9cd79a8c42876f500256d5d69f7de081abab375b08ac21ce221d0df1873cf289cb9b8c6d17ca78a1a8d88f832930b40bdef02b7519a2e1c2a86f8adcb5d9be7977f7e390565889d5ee6465f6aec9ceb57940f9f9abdc066e662ae0672ea4e271695cbd85d55000a2f471954fa6200be0930b8ea51c79b1eac8c55872b2a625798453bcc"}, 0x101, 0x2) close(r0) 17:06:28 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000040)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) shutdown(r0, 0x1) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) 17:06:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000040)={{0x2e, @dev={0xac, 0x14, 0x14, 0x25}, 0x4e24, 0x3, 'rr\x00', 0x2, 0x4, 0x15}, {@broadcast, 0x4e22, 0x2, 0x4, 0x800, 0x10001}}, 0x44) keyctl$get_security(0x11, r0, 0x0, 0x0) r2 = socket(0x7, 0x80007, 0xfff) setsockopt$inet6_udp_encap(r2, 0x11, 0x64, &(0x7f00000000c0)=0x3, 0x4) 17:06:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:28 executing program 4: clone(0x7d738de940225bc9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x34) 17:06:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0xc5, "37bce6b41811831354d33bd3cb9cbdf60bc3dd070b5733595947a141b25647a2cca4240eaa57766e2b10b61ed9ebd7f245df57ae0728e1ca05a08e23a6a1243ab268fe8d8ab5c84d050171e1149aac6f0f854af9d29a521b1a5983074f0b7b7e8b02f59382bdb69e57cafd861b1df2628b3153100eb41b94521d0c9f869ca65d4441d6aa034bd9f09dfe8e423fbe9d720c77417986b0406908250aaf1c100f4585ce8af4ac6289c61b8ad6e2a72a8b8a0752e0399de2aacfcec0079746e20eab64b63e435b"}, &(0x7f0000000180)=0xe9) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 1367.779990] binder: undelivered death notification, 0000000000000000 [ 1367.814534] binder: undelivered death notification, 0000000000000000 17:06:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:28 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:28 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x600) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x0, &(0x7f0000000000), &(0x7f0000000180)='syzkaller\x00', 0x0, 0x1000, &(0x7f0000000700)=""/4096}, 0x48) r3 = gettid() fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000001c0)=0x0, &(0x7f0000000300), &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000380)=0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6}}, &(0x7f00000004c0)=0xe8) getresgid(&(0x7f0000000500)=0x0, &(0x7f0000000540), &(0x7f0000000580)) r9 = gettid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0}, &(0x7f0000000600)=0xc) r11 = getegid() r12 = fcntl$getown(r2, 0x9) getresuid(&(0x7f0000000640), &(0x7f0000000680)=0x0, &(0x7f00000006c0)) getresgid(&(0x7f0000001700), &(0x7f0000001740)=0x0, &(0x7f0000001780)) r15 = fcntl$getown(r2, 0x9) fstat(r1, &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001840)='./file0\x00', &(0x7f0000001880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001940)={0xffffffffffffffff, r1, 0x0, 0x1, &(0x7f0000001900)='\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001980)={{{@in=@loopback, @in6=@ipv4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000001a80)=0xe8) getgroups(0x3, &(0x7f0000001ac0)=[0x0, 0xee00, 0xee00]) sendmsg$netlink(r1, &(0x7f0000001c00)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)=[{&(0x7f0000000100)={0x18, 0x34, 0x400, 0x70bd25, 0x25dfdbfe, "", [@typed={0x8, 0x39, @ipv4=@rand_addr=0x9}]}, 0x18}], 0x1, &(0x7f0000001b00)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @rights={{0x18, 0x1, 0x1, [r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @cred={{0x1c, 0x1, 0x2, {r18, r19, r20}}}], 0xf0, 0x800}, 0x4000000) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 1367.855664] binder: undelivered death notification, 0000000000000000 [ 1367.883722] binder: 10288:10315 ioctl 4b67 200002c0 returned -22 17:06:28 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f00000000c0)={0x7f, @broadcast, 0x4e24, 0x2, 'lc\x00', 0x30, 0x1, 0x4c}, 0x2c) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0ef585f3f98e9716ff476bf909d5bf0fe8cef61b862571e00b0dd3a62d8bab75d3d405d475f5feaf8bd4b83d61cca04992b0dd30dd4d7aea49933d973fa0934d62362929e794f1db0788d0f137ed7e70828c405a44a6ea59ba72f4cf831820d4f0a0d0ab891874bef912b8afeb5efb90454480d9ff00000096e44c4526ab7ac273e965b057dc630af32a28a7775f11490ccb152aa6fc6cddd617fe55056b4d"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r3 = dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f630c40000000000000000000000000ded9f3c0cf0ee9eca08dcacd1d13697cfc12f00a781addc595e534a7564abec76c2759e8ea51408218aa03fccf503cb453fd721f8474f4814ccd9bfa9bee571416b1b35e5c150ce7b220b5c08673"], 0x0, 0x0, 0x0}) setsockopt$IP_VS_SO_SET_EDIT(r3, 0x0, 0x483, &(0x7f0000000000)={0x3a, @multicast2, 0x4e24, 0x4, 'ovf\x00', 0x1, 0x4, 0x5a}, 0x2c) 17:06:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:28 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x20001000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) [ 1367.907875] binder: 10288:10315 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1367.923915] binder: 10288:10289 ioctl 4b67 200002c0 returned -22 [ 1367.933513] binder: 10288:10315 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1367.967371] binder: 10345:10346 unknown command -209324786 [ 1367.973499] binder: 10345:10346 ioctl c0306201 2000dfd0 returned -22 [ 1367.982218] binder: undelivered death notification, 0000000000000000 [ 1367.990100] binder: 10345:10348 unknown command -209324786 [ 1367.995986] binder: 10345:10348 ioctl c0306201 2000dfd0 returned -22 [ 1368.002867] binder: undelivered death notification, 0000000000000000 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)='cpusettrusted]^:\x00', 0xffffffffffffffff}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x2) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r4 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/checkreqprot\x00', 0x40, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r4, 0x8916, &(0x7f0000000240)={@local, 0x2, r5}) ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, &(0x7f0000000000)) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000280)={0x0, 0x81}, 0x8) getsockname$unix(r2, &(0x7f0000000140)=@abs, &(0x7f00000000c0)=0x6e) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) writev(r1, &(0x7f0000002500)=[{&(0x7f0000000000)="e9f29540b61b758bf0ab2ea44f5d62a1c70abf5f4ba538959d6f65b41eda5b3aaf05ed8bf9b02c2e4e55fd73ab5a0547924498170b4d14e4f58fe06f85a604ffcaa9fc549c0a085716fcd5e0d81745e678e7a96b0678af6d7feca4c5a969d933214b6bd1c49ffd7db4d72d04dd9c3fa966c2271a8a3a9680a9827c74eedc3babd8bcce872399fe1bf98a308313a94b158e565a3d421440e9b6457ab91f6cad9c941a7a6d92d5a23f494e6679b60db7", 0xaf}, {&(0x7f0000000140)="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", 0x1000}, {&(0x7f00000000c0)="dd0485a9f97891227389754207dffd55d7543a86f6", 0x15}, {&(0x7f0000001140)="3bae6bd3b9f4a1603345fec94f1b5a9f8b2d67dec010519d2bf3a05ef7376350386c1ce0f0893149acf5e03cd5321bf0a5d70e2c2a7f538a00afe0049f926bf20c3c891cd2aa1ecf474612df623f5baa5f7b87267ff2a3f5", 0x58}, {&(0x7f0000001200)="89856f8847f4e4ebe0837eef6936878e57beb379ef96176ec332612bf36420ae2c6a505bf16c8505239dca8c78adfecb4afa115ebc4cd46aa866d0f35826b15cd100f04bbe4f5d821a4501f3f4c934975c1ebf52775e706da74cbded58a19a3805b639622e5b840a055dc42d56b74140be84999a97a143860ba6c3674ab13d3ecce9963387f4", 0x86}, {&(0x7f00000012c0)="5228ea7d84113f4d414158b3a3b44ca66eab396736fee2fec6d03073536414c0a6d4b8f0157de9343152b4c8f5b8e75a58caca2c4e29267fa91421c0d2adfb661db0e3d030b697b352b269e32cef3a6786b072e5bf73b9b67e0ccaa0cbdbd9b5748fab4f0d3f382a74392ac4ea981a925671a9496c9ece83b8896b863c2f9bd0cb59ea4193e3068a41a34c9a3d62b723bedbead67daaf24bdf0b81e0c0579e883ad6f9a6b31f561deeb71d533a6a95fd0a092a067489ccb86f64859cde25408d9aeba10d7ec9f8aac44499", 0xcb}, {&(0x7f00000013c0)="06dc74787328aee02c0e6114096437f454171edec8b6d11fe2aec4cfec4402785a08f1d8cbd0fa5d3e2a2b6bf75643ea7f6a7dac2825aa12257cf3400ba1136e46441207c2661c5e1801d123e0835f2bfa4cf98841d72c6eb0c3c449239d10f629d92c42390f601a737c882b498f215b09f4a1946074274302b7c096ce111788630d168bf6f6b0bd5daf7a6abb1ca1f1b35eeb21c650e944", 0x98}, {&(0x7f0000001480)="0f2e3e2a401ee19571e483a348c62f5396926572566cd387f8d1dc8f6a681d9e1229f7b4a30e5be11cf615343441fec1a5f384075a42a8acf02496cc5ee6c87efafb26b8ce83c9088d61f9559324f6b05aa92990c38767a729d8714d87682ef7ca0ee518654bbf7f3de17fa804527d1a4c8c8e0609788a5a63e2a9b03d38eac2da04a07ba6b887794ad12cd6804c4dfe1fc059ca079cf7d27d5079cec6a8383c8a28432aae92e53a71054ed606e4266c3eff5bfe95888b4505fc8b9ab4bb37c1239b3ff4cdd2470ae7e0e272647367fd26787f221afb869e5998f050a0d8f81523c3ebd3a766b0b708df11b1660feb4ef31dc36f8853b53600087b07f00b9ef1d21d5ed1ed98220a2589fc4ecb43e3835f8381a23f01c4b64d61f9018d7cf782075f881e5ab0c49e51241f06b5ea1232c0d2fba4af0a2b0bc4ec26cbcbe794b02a89207342c1c9581fd5e309851464d4489bc6029184f859b4dd6e398ebe982fda1e94c1aa56ded8507344101b0a21b863514b14b3351718697e7562ae8f942066e6caf0bd2c376545395f53a38917f543bac4f71a2ef25d72f0854c2d9e3a051b73fac45f05a701fc83c5039a7e179cc12706686b3b2dd0dc7e8317ceb0a86b065f1df30571fc03b92daa6cc6c31c4bca88d23448e5f025d39db20155133737ea6b7bf87d23ec5f6a29934e8fcb04640c7906d65212e45ddf2d8923d7e2032c59943131b5cc65bdf86625d920f2dcc2d1567d89cb3a91aa4bfcb56bff8f082da7fc9377cc192d06ef5cc21475090523cc9780e3284e5159fec54c63086caba900d1ea8408bd20b602ba9de4287b61ff6b472a1127a0adea1f6fbf28263843740387c507207219693d3880b6ffbd122fc14091ea2d7eddd6aa2d02af7939a933e15a05ee230e16330f7fb3a9a4ac513913ebee243365d92889db06be3a6b0711f16a72937be4367fbf6c461870234e94ae4503be4bc6acd0d96ed14d6cc876e2aba73f6cb42bbb6ab15b26886a4bcbf4f79465276c8fcc60e562dde7a5b186f6506a0478eccf5e3af60074324ea31156f74336829475f56ab0e3f85af6c7078e8c50a4b469374c55622d048f07fd4f412bb593c6b940126bba8400d99557b3005d104b4b5c1245788a2e6e1ade678c2fa5261fae7353b7869fe0ad63ed6e1e29e7b76a284ad80559381077b273f3ba9ec6c44072d7bef320bf7dc28defc76c341dc91918aa49aad2741cbd8a6b09bca2f885290508e42867cb37390e33f740198e495eeb9bf21c2efbc933b7998b6b6a05dcffb5f84f1adb20354a7f91395c7bc2335f30e6fcbef8fe6ce58bd29f404fadb86c0418733deb5c2da5d5d7095329b34306ae142a9ffd431d7eec588d81d933f6bbf2a2cb4325e926bdd517fe6b31dbc1852254a4f4119a45b68171bca7c9b114621ea6de2dd02b7b4ca1d089a82dcaf20795873b76f2ed76e693d90e64c9b692b80ff0960829d4e645d23fb06856a149a89838b643cb9865f1c79db2a37d882f4593304c3818163d30c42d169e769a201e9cd160b221b0332f3c2ef1d22ba2ee8ebd3a2e35e487c1334e95761f1433f8f5f63f3d7cec86e457e27fcc8a3e8b9a53e4533bf3f6ce2a87bd197336639f8cfcf61e36eb18c48d4caf17391a0cb10e2d8639ed4c1bf4482d3b2444356c3bf061077219061c95bd1a73faf238c8c3ec4586d093e7dd67bd950bc4151444d672c08c7732dc7b23dde4a592e938146a442e342df200492a45ccf82601c0623338e5df01b9ff52a49cd0628168377f1cc9e6b9882dcd7eeda003f1ed78ce983424a8dd03dd5eec3d7294bdc51f1e5772cdb1535c340c4f60bfc3525c4ff00f70f5ff6d3aac00b984fa6eaf1e0aa45fea067015280516292e764d967823a9f3e88da831638e872e188a6f7e673f6d96b9d0a3b312c7ca6305a98d260436805e7b46a3f7f5878498128b503b4ce5b74bc9c7beaf3652a8367187beec3a33cce74fd6e6aff798b47e243d446524a5a2dc8abe3a7049d6bd8bf871f0391d366202c41c37775f3f47842b6cfba02fdfe3fb307c6339c66639c599584b0a3b67275592dc04efd07b655cf92548001580b80cc90078c9719f99a8b35dec189cd203c75dc830c9264a21fb135efd6684916bc63f32eede2e1b941f88ef1c619bdee4f9b37bf9ccb64625cbebd22bd6902dc77b51a028c05140c8bb1ae3476bc71849d19a787cc67dfb32506ddfab1bdfdd2923062ce8a1397ed1e9e042d086ae8a3c80217029c4ba1d17b16ee4f7be521fed5a084bab4f10915eb3aa652c40070f6c3789c1662bef88b9b8d9ec3c663468ff36f13456948dfdb0587e585e90ecb43b5895725ff7667a1e419b624e5b9edeb15517946a16fc2fb1cbbb5402727bc21c3dfda95b0cd1fcf76dbe27ad1f2bf06105f052d971a59524ce465fba90164ff316f42672a2764252bfaaf03bcbd6c5a5b3f0e5c1572bc371348680e362744ce35798c6f796ff5db85d36ff0c0352b7dfb5d68b4f69b672651644409921abb9fea7b6a03a60f734372adda2631654d4a7a8e6f802ca5f9d238d8980deefeca5729eee112c9ff22ebbeb99ff88da55002cb316c8ada9b87e445d963ad7d21da03f5d5ceb0bea5b39d17686b0a452eee60a59490729b1f2879b045172d5e43621b8217fb129ae2d6f7d9c253e23f15f2566df043a15c260fbd81a779d3e98b62578702cf0a291408db63553ed077d9b9014265f058888fd7da34cb7e8f8c67f48d299e2c0c6cda4845eca552bd269b1e959d60ea05c6dd39c60fd174b4db255ab4edd4b9349cff92a2d365a979b0776cd9bbdddb2d6a9f51f79c44669dd76fea3adf489d695b9f0e0429571cae6070817286e16d337406cbce8b1cf26392a3ab4b9a3d10d02aea9fef790823fe0c9008eb52e2419d900c730fad18229ac9e7e7b293984ebe8d245c4fa1db3d181f46fa4b13b9f66da9e3f8cd66f48851824ad58c78a7b4692d3f3da7a57bb93a05c6488667e904aca3a05ef595965a2114031d3dfbdd543d4dff7185386d77c486612fe9d09c1a8717aeff52b987f6caaea0aa8f60158810093bd924c45f923b81e75e0497f9c1592dc0f127796772373b608d811369688ca42a5142e1231afa64be66ca3dbe58e0fd75e03370830826bd9791e20e29874cc4cf58d553ae953b2821a55e24012a227d6cca982ac8eb82887bbb22630303daa3c231360142695c57c54aff9c588f3ec91e8a2abfee9733d62ca2455251771df083d642aa6d87d46641a9cb9a9f5ab7fa843cdcc3ef03cd0f618f4a5a95496bc4f4319f0a5c1bef48363232e1a1f46431496b6f8809e9633f64053fc4a0296fdd9fbf8ea0c6e55896adc8c0e9d15cbb0494659f0be9855b54b1562301c1ecaabc16f3d1a36fcc8b96514d87bc6b5d70d337d1ba5dc06b66c340b849c8b1aee4764a8abe1c4970847ffea375c0dca052bb91102efe27fd1f6d5beb53da56ba8ffed15e188fd471c75619c12315a3ec03abdca40187f840694dd6c9e8d228c0e3d3c46dc9f5d475374cbffdffe251cad362c48cda7ccd728ec69a793c50f30b433676482dfd6999636c418d0d88636b8c6a7b9c65f18fd1e5b44c42749db854fc19115476c0129bcddee4b23fa63c674dfb2a49d6141f2262f9c106979053d3f7a78d2710426d68b4346c4b3b2825c2a3fb16fbcdd370e9e34f3261018b8f1b4ff33f4d84c6a4b849d3b0d68c1121d39d76996e4a9b933a77fc31f952fdfaa187959473ee972fd781eb6d9ca905436f7cb72f16a0e9c60a96737e13e1100b19eaa52f8773958ae87aadcd9bdc03cf2f58d87f17f1a2a4ab02df458b1c2d7535cd91e938b5aab761f2d5a5e2533cdf035e304dd6e3bee9f585ca7357ccf069d129f32d51dc6f0fccc6da6db0aa84ecafd882d3271751fcaf13e7e74f6e156a61d41f4bf9413a0f08f466249f0126224c390437adb1956fa0c4d3e9c29076f0f00fb6bbbe7d990c8a46a42b067022f6a942620944d4f9d839596560d6b0592d892c0d440f9d74a94a5a94af2f2a98ca864154722541d93dffe12fff8eae4e2c0076763c4d0d104ccd31a89a31fd6a1acde46e8d5a0d636de88e66860638ed983fd4115cec08b81367a0c9a5fd83f258b29c0bd26147cdaafcd6e37ab7e74e5ebf2470f8ce20fcf5b552cca5b10583046f4b24009f1f8d7eee27dea30d507c2d2efcf897fdb8c8980d31a0980674fd8a303a61f77834af2002c6b42bc8e4152989cf65341f7a537b758be707fb04285deab461d4e7afacda66801782b7795c33d126231d814360d2711f129b5d003ab5cd1d752f6ae779271e665051787967d0b23b0a52402d960726f6ee950ce84452f49bdc6abd4665d975c81d7e03e898e3da8d16dfc34aa97f0f76195360b9022400ebf08a2e7c6af72800f50ddb801da40dccc79ca012bb72915c32ad0d1711a9b86ae202a24e9ce232818dfb0edfb5bf06d6f5c2f42a100f2bb77328c5bc7544d62b0e6b230027ea865161c03d9de7c6406a2922f2a3a5365f31333eb5e01d0102ba4b7cb6a191d6e8f4853db73c849e54528a719555c435b8c1e8b53f1e725fbaa59656d2895c0300096399eb046f9f01c5ced5e61f6476a1fe3440d4de3784a640fe8bd4f9405e11e909fae91b0f42388fd3e9587d3a8545045db35ecb488b8ca9a53b1f23f80bd54054adb78a8560735f06ade505aedb29e41c32a4b5487b2ee278d145ff178b9cf16a3651fd52258cf7b93e372c5622a04035ce1898c548cc6d504de725374882f76d68b1762364081027e9cb687b73eb9e35941f01a269dd11f4655e35825c477536053d840801b97f16a0703b5b1738d6ac846b31c66f0168d03a97fdf25968812849d92ed9fe70d37f0e08a7b962451af080eac6586e07a4dc5e74cbd1a5177f20c1ecf40c2d7778e69879d6ee6f18918ec73b11575272b2dfe47f08b3acb42f57eefe2cb6b223dbf2726f8aacb3a3c9af612ded6d223b0da8301da3ca515d9578ec38132ce6b91739bcacd1fef5a0ee9ebaf07c2f6e9d6c906308d5ec28ad23b75b03dae877788531a2f3e7bc053d75d85b12a504b5aad5568ee28435b1a1de1fd526c9ded24a9416984b997a8d177409654a8a5b3cd9eecc90ede3f6bcb2c7d2ed4774cca66eef8ad18157f7b857a582ca68ec2be0817d4f92d1348f99ea4bffae0d86e26494d7744492e44ca953360a42fd81d6fc9d95d9d3f6e604d0df4644b06d0415a0ec1848a385316d01cf71d48902eb42eada616dad7a73aed1733a28dc11087a662adf417c61204e72f15a2c3dd8feadc488698b88e706c910e0968c9d96e0d05e296875d40e8f17ef6427481d9b63718ced22472582877533151599ed0f05a3ad8c64309ae3c2da198290d42edc55243fa0f493f06e4ea8d7ea362c55f7850a73c127de35c8cd0b94fa85e8f679862aa31d0edc043c4feacc0ea10fc36f8244068b79bb3cae470ae7afd62ee4a36e5e7513391ffb918bf79c76217ef27049dc83ccadc8150e18694bc1007b31a88ff05940042a9a058953ccf8ac533a44fe5c9f3f882b2498701fb97df67ea45355f201471db8ba43aa7fd9aacd7c6c404fa753e456c411004d18a52105146d49324cd20e3c562fc8bc89fff93cda95ff265f4b0b024b2905e5e78a7fa8ce47ddb36247782f449fb1e37c95e8375f69b1e0f05733af19fbb4322df1f78d2af7cf6d5fd1c709a31dc200d870609c71213c7551e2506c204fdd3bf9ba5e15a674b35773bb5268b2a566b567f188b352b122d8729", 0x1000}, {&(0x7f0000002480)="d0dc75cadc17978fd57775ed78d26a10c4d4e8c79bfb44274d72320484e8f1f814b9ed9038e95be122db0ccb48f1433b9d8e068a8588d18c266f7d055079c5cf5bccd9081a87b14ec7f6e9fb879f06d10c0eaea41167f886b8f0c910768de81a71e71c18e9132d10775df49b4077486071db8de21b1979dc", 0x78}], 0x9) r2 = dup(r1) ioctl$KDSKBLED(r2, 0x4b65, 0xb691) 17:06:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = getpgrp(0xffffffffffffffff) prlimit64(r1, 0xa, &(0x7f0000000040)={0xff, 0x9}, &(0x7f0000000080)) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="08477d9725590e220be4a32b4a628ec75918868e25d0ed51c126a2e855b8eedc503da4521cf2a868c670808f2017e4a033d44d68776dbab611379ca5ae3e1d2bc5ac672a781caf41e328e54061a7cab0ddd24bbc"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000080)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c4000b700ff0000000000000000"], 0x0, 0x0, 0x0}) 17:06:29 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@alg, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet6_buf(r1, 0x29, 0x2f, &(0x7f00000000c0)=""/94, &(0x7f0000000140)=0x5e) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) arch_prctl$ARCH_GET_CPUID(0x1011) r3 = open(&(0x7f0000000180)='./file0\x00', 0x422040, 0x110) ioctl$TIOCSWINSZ(r3, 0x5414, &(0x7f00000001c0)={0x0, 0x7, 0x5}) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:29 executing program 1: arch_prctl$ARCH_MAP_VDSO_X32(0x2001, 0x1) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x204200) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000080)=0xffffffffffffffff, 0x4) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r2) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = fcntl$dupfd(r1, 0x406, r0) getdents(r3, &(0x7f0000000000)=""/97, 0x61) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) getdents(r3, &(0x7f0000000080)=""/95, 0x5f) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x100, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) close(r0) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:29 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x176) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) tkill(0x0, 0x21) [ 1368.659188] binder: 10373:10378 unknown command -1753397496 17:06:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) write$apparmor_current(r0, &(0x7f0000000000)=ANY=[@ANYBLOB='perm$rofile !%\x00'], 0xf) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000140)={0x0, 0x0, 0x5, 0x0, [], [{0x1ff, 0xbd, 0x10000000000, 0x9, 0x7, 0x4}, {0xcc1, 0x5c502de3, 0x3, 0x7f, 0xfff, 0x8001}], [[], [], [], [], []]}) 17:06:29 executing program 1: utime(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x2, 0x9}) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x1, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='oom_adj\x00') fgetxattr(r1, &(0x7f00000000c0)=@known='trusted.overlay.nlink\x00', &(0x7f0000000140)=""/50, 0x32) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="6d616e676c650000000000800000000000000000001e00000000001dbfba3b3e1900000000001f0000000600000040050000c0030000e802000010020000c003000000000000a8040000a8040000a8040000a8040000a8044a19fa76267049805b4f58129024c1d47b047e30285b5f4d779884ef6bfd7212c27872a1a399624ff29c0c42feab28008a39f047028ef43a8e869459bb3af2e54f41eb3215af893f3265f8a814f841b75494dffeea7e7269435b5ff08a42258d9f1aafe4f4f66b06380a9c95ad5157b903e93daed30b2dd0efa5d00b5eef5dacb01527121d76958f4155", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001dfa4cfdebb0f43455f3641900"/108], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800f0000000000000000000000000000000000000000000000000003000616464727479706500000000000000000000000000000000000000000000180100000000000001000000000000002800544f5300000000000000000000000000000000000000000000000000000086ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f00020010000000000000000000000000000000000000000000000003000616464727479706500000000000000000000000000000000000000000000400014000100000001000000000000002800727066696c74657200000000000000000000000000000000000000000000020000000000000030005450524f58590000000000000000000000000000000000000000000000008100000002000000ac14140a4e230000ac1414bbac1414bbffffff00ff0000007465616d5f736c6176655f30000000007465616d5f736c6176655f3100000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000011000000000000000000000000000009800d80000000000000000000000000000000000000000000000000040005450524f5859000000000000000000000000000000000000000000000001080000001f7d0000ac1e01010000000000000000000000004e2300000000000000000003ac141420ffffffffffffff00687773696d30000000000000000000006e723000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000007f00030400000000000000000000000000009800d80000000000000000000000000000000000000000000000000040005450524f58590000000000000000000000000000000000000000000000010500000000000000000000000000000000000000000000014e21000000000000ac1414aa00000000ffffff00000000007465616d5f736c6176655f30000000007663616e300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0000600000000000000000000000000000c000e8000000000000000000000000000000000000000000000000002800727066696c746572000000000000000000000000000000000000000000000200000000000000280054544c0000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000980000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x5a0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1368.721346] binder: 10373:10402 ioctl 8906 20000080 returned -22 [ 1368.721748] binder: 10373:10402 BC_CLEAR_DEATH_NOTIFICATION invalid ref -16730368 [ 1368.757133] binder: 10373:10378 ioctl c0306201 2000dfd0 returned -22 [ 1368.767869] binder: 10373:10402 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:06:29 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x40000000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000002600)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) fsetxattr$security_capability(r0, &(0x7f0000002640)='security.capability\x00', &(0x7f0000002680)=@v1={0x1000000, [{0xfffffffffffffffb}]}, 0xc, 0x3) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000026c0)='/selinux/enforce\x00', 0x101000, 0x0) getpeername$inet6(r2, &(0x7f0000002700), &(0x7f0000002740)=0x1c) recvmmsg(r1, &(0x7f0000002400)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)=""/57, 0x39}, {&(0x7f0000000140)=""/4096, 0x1000}], 0x2, &(0x7f0000001140)=""/102, 0x66}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000002380)=[{&(0x7f0000001200)=""/86, 0x56}, {&(0x7f0000001280)=""/215, 0xd7}, {&(0x7f0000001380)=""/4096, 0x1000}], 0x3, &(0x7f00000023c0)=""/63, 0x3f}, 0x4}], 0x2, 0x42, &(0x7f0000002480)) sendto$inet(r3, &(0x7f00000024c0)="751e60a5b4bd0669e4cc14cfa071333717a8109780f1ef5b5f3a6141376d1be62c835df2cd7089053914abff9b03b9d1c0ca0f9a2fe55e70b6f2e0c34da281eca3bb6f1c872d7a9b36ea9e9f36d366e1ad27f192215fee093659b5251648fbef5a2520cb93af836e467042f0fcc28eb5023ed34066f3d1532ecabe94b43f025a75b4c3d56008026d7f586ef0ad29092cae4f86a17306e64c3b5ee2b644b1604e2304daa21d467b6f212c1e6ba87941279e4b4a41cb0f88f9293c2465545ff0c47c2d62663ed4e034e1e5cfbeb6d3af1dfbec375d97f5", 0xd6, 0x4000800, &(0x7f00000025c0)={0x2, 0x4e22, @remote}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8000, 0x9) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$ppp(r2, &(0x7f0000000180)="15736816eb62dce67f879927858991aeb080ff7eb32708cb07634b6cbe3a9595bbdc5efc952d214baa3093ef7423400c19cfad8e3cdb640929b81afd153c635a47824cf29dca06e230db1e66eaf512f2a41ed4281850f441013f6abd9266d2f610b25d8b3073c9c87b2d9219facf3f346bf4cea7fdcf4aff9dff779d120db16c0df505e5c52161828fd839bc4e8ba82fb07c0b57e9c29fe0c8e5b036b3483f10f800b1dedaabe86be853a39987ebb23e867f685e17336bc5a4b558764a14e742bdad707ab4129221c35cf2fe3159110e847278f13ed8a7fd58bd944f793580f5c295fcb6b7410797d5ca01083e14b2c38d502733eb7d25", 0xf7) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key(&(0x7f0000000080)='big_key\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000140)="606944847ad00f5ac751adc566bede70c60004a94ad2570c64513d3141c18942fab1133547a40e344ce9d9bca722ae951479ebc1c1ff5fc204d53fb76786bde976ad3f479037991de92e99de68f3bac588ee50527441477ba95d36e6c8d8d4242a476f813504f713fc2a554c3b5d187c6727f03cca74b75b56947905b5abdb", 0x7f, 0xfffffffffffffffd) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, r2) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x800) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f00000002c0)={0x8, 0xff, 0x1f, 0x1000}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') fcntl$getown(r0, 0x9) close(r0) [ 1368.775607] binder: 10373:10378 unknown command -1753397496 [ 1368.777459] binder: 10373:10402 ioctl 8906 20000080 returned -22 [ 1368.777501] binder: 10373:10422 BC_CLEAR_DEATH_NOTIFICATION invalid ref -16730368 [ 1368.795963] binder: 10373:10378 ioctl c0306201 2000dfd0 returned -22 17:06:29 executing program 1: add_key$keyring(&(0x7f0000000140)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r0 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="ad82b550ef980a9a30ff750e591e74372f6ab677fa90ea83a05b1629d457117d15a8890dde75866f7246e6084260faaf4aa220706f4014a1768ce5b7a0f6c2", 0x3f, 0xfffffffffffffffa) r1 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f00000000c0)={'syz'}, 0x0, 0x0, r0) keyctl$setperm(0x5, r1, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x51) keyctl$KEYCTL_PKEY_QUERY(0x18, r1, 0x0, &(0x7f0000000040)='keyring\x00', &(0x7f0000000080)) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) vmsplice(r2, &(0x7f00000002c0)=[{&(0x7f0000000000)="935229c88fb05dc50006af14197b2f702d1edd2066110ff3f6de37d24675115c5ae81f9122bef43d4bb3669d636c3a5eb514738ee180dfc62392dd5528f50fe909a43fee5f9bf801eafb40f12cc29b3158b3ce42c596b431eeb6baaf4aeea09407f830df8e02d5c347c858c89ac54b25dd551f880dbf3fae47ff2fbc612a5316228a71e084debd4c9ca1fbcff8c6a8fd4751354304c0cfda1cc012eeea0747ff5c654ef829129dfaef6cc528b2b1006c02ea4b130d893b6e74d3a15507afaaf4c2900dcd81f71c77ca57b5a9405036922bbcd064b45adc06d6450b920e49fc70ccd8ec4331bf60de439e3d96cf2737", 0xef}, {&(0x7f0000000140)="4a215feedd835c14cc14cc41b81780bd623a41a83f3682d75ccefedef85bb7d5921065d55d420afdafc6290e3d10d9faffa1f6db2f7099aa9c3d3c2b41252bfa5953c9396705d5cca456f9c2a69ba0ed818f740d043db9f003675b610abbe9a5a7f9c02065079c19e19f61e2b47cf4a6554f2f6951234d76e3354b80d83e333dcb96c13c29c755692746d1d01f004bf49d1b7768e55f7adaafb32ba79a96061f4d0096861c908d0394cd2327906691fb91379e7a7492b07cc9155b6960b5f0098e5825d762249c", 0xc7}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000240)="0f2609f3a236d724a1e34886b114eb5708ddf0b21f8a86bc8166f7a4f92b3bf6a3b05f80263ecfb3cc5aab2522172d45c8531855ee7123529967437126cb69abcfcb5bc666b8655e9c81eb7b5d623ac260b2fd49aa990179ec1ffed0e9d2395211d9483a2b6f225f758a1fff70ef", 0x6e}], 0x4, 0x1) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x420000, 0x0) write$input_event(r3, &(0x7f0000000340)={{0x0, 0x2710}, 0x17, 0xffffffffffffffa8}, 0x18) r4 = getpgid(0xffffffffffffffff) r5 = getuid() r6 = gettid() getresuid(&(0x7f0000000d80), &(0x7f0000000dc0)=0x0, &(0x7f0000000e00)) r8 = getuid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000f00)={0x0, r3, 0x0, 0x16, &(0x7f0000000ec0)='/selinux/checkreqprot\x00', 0xffffffffffffffff}, 0x30) r10 = getuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0, 0x0}, &(0x7f0000000f80)=0xc) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000fc0)={0x0}, &(0x7f0000001000)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000001040)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4}, 0x0, @in=@dev}}, &(0x7f0000001140)=0xe8) getgroups(0x6, &(0x7f0000001180)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0x0, 0xee00, 0xee00]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000037c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000003800)={{{@in6=@initdev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000003900)=0xe8) getresgid(&(0x7f0000003940)=0x0, &(0x7f0000003980), &(0x7f00000039c0)) sendmsg$netlink(r3, &(0x7f0000003a80)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000380)={0x464, 0x35, 0x108, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x8, 0x22, [@typed={0x4, 0x21}]}, @generic="e9bb9f55063e2fc3dce99072964ed18b61b8a35223d0a00ddeefedb7611ae62439725b4627234c5804088d6ec9d62bcb1f277340e71592d498fdde055a33168c5d02d195cd5ec9b42f56b07e1b4cab694d2ed064da6ea08dad965e851d11c91f3703c45a9807715bc3a06e83e3368854e148e253570255c55f2d6ba9d778c5a254af8a05de7f13caffce4e405356c04e438f683a4494a73164f2da62265421fec02c7e15edafb1c94e7a2fc326e362838a48b623b615833f16ad243300134bf8128c107aca6ee897259cd3fe20596e9361d16577e3a3271438a81a8aceaec5684f081298f39b1f64911ba54a7a65e16f5638", @generic="9915c46d2edee94bd9cd3f032d878d5c6f94893c00d8289c02f90856d880099acb873c410726dda8f116aa398e1fe9ff42cc316ebaff6dc6fd9fb8fb768e5facb6fdc6ef69c65572444c630e162a0e9311ee31816c41db5d6ce3b07c0cf111c789dfcad488f5ab9b9c003002a7aaab80fb6a8c84b6a6a8495383f1d5b5291e6a8df73a34571be601be", @nested={0x2d0, 0x37, [@typed={0xc, 0x78, @u64=0x79e}, @generic="fdd4bdb8f33dbaa431e74506b18a30a916f2aecc24e243ab5bb502c91f3cec5315bf4ba6f4b1131fcf85e0df067c658a929c94367470ee4b3c2b20e6e1cf36d5780c786d644aa39ec9f57d6f4e64183ce94438e567c0f755684ab3ab9ad37b862be3edc6acf5bd79e2bffcdeb2badb6c8c8d051680d6e05be065df59146501abb1f1d7139819b943dbc1d771d2453b456e8dd2bf9578b28fb21f8d40ff6290a20cb2ad603229b85145964da123640656098f1e86b2856eb76f7e03e451f8597b39e95fcc6c1c61f850f64cbbb465fa8bf96c2861", @generic="ce7c2008497c726d07c32f78bc6331fc5141b7e5fc43c1c5e5bd2c8a45f103dbac65543bc15c9707bd76e505b811fb9b92d3269b8b5a2d9c7321a93e0be7c3a29512d175f29d0f104ebbe011e6cfe83ddcb3cc10c6698dbfcf8a9d142ceed7046b21244b400c72263c02583ee9e5fe76cdca50f61fb43010892b395bbcfccd85e8337026e16129c73e900a43f811e5d5e5041a130225ca96a16a8d66780f6219748f65ff138bd6eddb80d78518a29150abc9c8fc04f5e7632104208538e5fd909de702d6101aeccf0af434f522c7a710a62bd2841f5ba4ac0b08ee220499348741ea5a5abbd0014e512fd6cf22b33912cb2604083fe52921f5", @generic="b5a4ec25fcc3d8338ec3db42a37d0f1661f0078ff910495276037be0340563e87333f290a8083e7ed466091738290990985c1b126ebe5385bc2e9e73652a599582c5020d631bb2f170144fd8381021d940b2926f22917d5ef9a843b859a13ed1e69bf907a769ab07451d8573c08eb066a4c7b326c6d24a8305426fb4f5b55d6768efa973d3b42754733d0d050d5de8f14efab772b6d07877d76c92d3de313fd767db5591309a07e3323e111dac60b5345b292382e8fa7045068ff1617f77140efa8891dc8dd7e9aeded42bbcdc2e7d8dea83899c5a92647225753229b94e2c195ce2bffc79f1df7d1ef3d72ad8eef6b4cefa"]}]}, 0x464}, {&(0x7f0000000800)={0xf4, 0x22, 0x5, 0x70bd2b, 0x25dfdbff, "", [@generic="be", @generic="d3fe20b13050", @generic="a39741189e8951d9941dece7b2c41a9deb43d63e55e0a1396c6020c7488f421dcad282edc238d6b58719ad4f8926019e26fa5d5a686ea5d60edbd2a53883c1e6ac60eb4399c6da6c164b7b8919fa3418974a485e4fa74a07e36a30ed18f657a8a2608b1a0d0be09c4a2d2bdabb1678638b3c47fa50b2afa1da8126b79cf4d9119c4d8488456b14e77ce18ebe4225a750183144fdabcd4dc0fde1a74a74e222322e8ea30d45b05178b62e63d8b6fef3f8ff5ea6ddce08630ee4b5e815893a8ab70872d0cab945d44e3c71bac491252b42b7a4019305e1a3e98a78"]}, 0xf4}, {&(0x7f0000000900)={0x240, 0x29, 0x0, 0x6, 0x25dfdbfd, "", [@generic="5ffc170394ab64f2a30814e525729653eb4ac2149dbee5f585a026db09b75d4e242d2e319911b1a387be90f7966a437b3095f987f5021e00d67c97e0413fcbeec423be368ef6318019b259e2bc9973c975a571359510ca564d4b50df718d2d27a8405287dd240d541e1b943a7db15273ba101edfa0ca3a7f10af5784703edb7a71ee57f9ebc1c7fe7a", @nested={0xc0, 0x8c, [@generic="1457a0d682cc8f29c0a057bf9bef04f0ebd234be6f58b019a9d659f461ed914bf3c12dabe4c03f1fee9d6cd213cd3241467113f212d106d7344229bf424942", @typed={0x8, 0x78, @pid=r4}, @typed={0x8, 0x3d, @u32=0x15}, @typed={0x8, 0x35, @fd=r0}, @generic="6a0bde7fc1e53658805712b626b98f7b75b920961b5d5741ff82545650643ba192bbb1bc205d8f1c8fd8b1b4fc8e2e166ba6865d11629dc5e3e662d81023c500e512a705d6a864", @typed={0x8, 0x49, @pid}, @typed={0x8, 0x6e, @uid=r5}, @typed={0xc, 0x70, @u64=0x3}]}, @generic="5d7ab53fe3dccac0ce1d463dfde118777fc198bdffe1ab72dd0275ce48bf679198d5da4cb7cacb52c353cb6d0378c9c1ab2ba21c5f9cc7c44158eb9f1eea974ff7ce3c65ac884e08c14b37e50f6ff972e73dee58859fd6b7837ad9b3cd6480e1e321f339a9afc5dfe9d18fae4787b456792e48afd9e51e434919b117e5ea", @typed={0xc, 0x3, @u64=0x17ad2a33}, @typed={0x28, 0x11, @str='-\\$&ppp0bdev-\"^vboxnet1em1security+\x00'}, @nested={0x34, 0x30, [@typed={0x14, 0x24, @ipv6=@dev={0xfe, 0x80, [], 0x14}}, @generic, @typed={0x14, 0x57, @ipv6=@mcast1}, @generic="1c47bb5f6123cc5b"]}]}, 0x240}, {&(0x7f0000000b40)={0x230, 0x1e, 0x100, 0x70bd2a, 0x25dfdbfe, "", [@nested={0x184, 0xe, [@generic="40207760a1253405d6b69912b188332e73643f1b39f93da299889317f876f3fbd02af5ebea983e27fc0ea5a316ead0a02a39a17b7c5c56c4af3933f1f8ed46ddf5deb232f46831acb92648e05d3384813a8c6c4b6a906db02ec7c9ae1905cb7c680fdfe3a0d94d07eadac2962ddc06063267d5933cbcd7449c565027acebc968fad5f051c3a89332e62797402cb4477a0197c64c38da6b40c6da73b02978", @typed={0x8, 0xd, @pid=r6}, @typed={0x8, 0x3a, @u32=0x9}, @generic="e403d561e794868230b649fee8b9d89644091b298e0c7d27b5b13f2e267ba2cc90f8af8b709e0bc39cc55e178060fdcd8eb6a4156bb5d7dd75b01cbe41753447d70a1a61a8e54c217940ab058a3b4efea21dc60e2ea17e67068e856b81c9b47c6adddfdbd8567cf0b84d608072f38b32a9f69e5c540e566a18e78e7a6b205955cdac6aea07bfc2ba5937dc26b8f489b5ec278968bbb4a7c3b1f1144abe1dbaa9eb4f4d8c4fc016d893e57aef72f451356467432d5138cf40f8379f39d191d292888e553b2921cb21cb463e0e3e", @generic="71693fb1"]}, @typed={0x4, 0x4e}, @typed={0x8, 0x95, @fd=r3}, @generic="ed012b825cb0da24323371c08259f45d2c1b78eaaf15cc5143dab5dccd77889b058ab8bc13ea3716071817abed8291049b2638a93574abfe738936838378ee795fd9507c995dbbdc4894bcbc95b3917341f71f3135103ca4c14d492b5a345cd91d8d2954febb006c4ae41c3c49ff99749a1c659cc8b4307c9369f2f0016a2c73f9279737b79fbd141b045de2f32548e5"]}, 0x230}, {&(0x7f0000002200)={0x54c, 0x36, 0x0, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x3a, @uid=r7}, @generic="89ba547a2c6e0e066b6a4430359239183bd10d67f44544dde77ba332b3c7f7b7a67d21e67b7f71ff367c5de26747f1e34dd35c232e1efba767ebb7e79882ad2ceb28499850babecb6ca8c355baa0cde5cc5ba9b7c4fef4c99e9c886027c502aeb5a6865a69a7940262c797e08370f6dc7c65a71d1d3d9e58436035fc939c62727184a1b472d8e73a5ffb2f48ac5bc883e871d3b82a55eb806830a4b3ef086531ddf37bf7b0db5c35", @typed={0x8, 0x12, @ipv4=@multicast1}, @generic="4a6a339df5d38d08b49e2828e3c37e656faab9e594bc9262dcfe6ac5a2fb54651b2c9c645aaf82dbecfb1c540f80cba037efe21dd19730a9a5a99b5e7428eb422a52a54eed0cd6d71b3c76a247c4e1694df3297611ec10cbb73b8be2247973a1dbade001929e133ace92e6486fa5e9f5f66f", @nested={0x2ec, 0x35, [@typed={0x8, 0x8c, @uid=r8}, @typed={0x14, 0x11, @ipv6=@ipv4={[], [], @rand_addr=0x7}}, @generic="123f2db21ca20c2b98e7f105b40d53e156fdd0859c312517b562ee237ad772cd9877e523186739001f35ca6007f2", @generic="e548568ba9be2c3d741cfa4e58a694a98f2b8932384dbf35ae874ae0984bf7ea5ec6ab02c12501df0a8050e1f3c0cc3b8a9138039081da3ebbf3c1359a0e44796281de8b776492a3dad6d25e576f7cd9f8e13c680daa0bc2b54ee75effb730adb0e859fa0d41f51ce41a4e8a20bd6f6284390e7806f30ac632d2f05c2f29578c0f6fe197eca64a7237a1136afbf45dfdb7e519787c1984c5ded2c39ac43787bde00ac3f4b7e6f9eb6eca899d5fc01a969d0c02bed5c8914216c5d6287bdf2473d7414799434097cd6c98608167d90df5e5", @typed={0x8, 0x4e, @fd=r2}, @generic="e99d2046991d61d242bdd2002cd6c27447279bdbb8003f64d8deac1994a19bbdee4d09771ba07549a04811191733641609becc8db042439156aeeaa10822", @generic="4f675b9831f68d0860039354a58a5010f6df2765478b214cc6e2b936f6684d2973cf8cf3009a70054b34986f26dcb72c8117bac53fc074f82e064d4857ff0ce154c0324038975557668a39375831b8e286993150899ec030fe8216f84105176d4bbeba5207b73e2545cb5482c78aa273c1c0ac64b425f55be89b6084d6e8616408b69c7ad60adef5822fa374beee2a53b3594464727692d3f407c2d90a6800f70979bbdd99ee7e6e3ade7439fe13bd0a7718252e546f1b5bd3440edf2562d027011f5ce83ad01ca07245a3f2d59b381a967e21d838319ba1d4a41a70d2c0b76bb6d8ff11f549900176ae6292f479f48191856f00070a", @typed={0x8, 0x7f, @u32=0xffffffff}, @generic="8157e4ccdec702367d1a783a3e2226f051094861f96ba60ec764c4966da2d7afb506330d6935e6a159f3a55b3a9b903a15959f62017c8812ca6d456efdedb16c4b009ca0fd94b571804a657886578b05eed51acfa429a2404d443412afa0a03b7fd2f8eb02d252f8dcf7bde289927de1398d891cd6cf1bd5429f38", @typed={0xc, 0x7e, @u64=0x1}]}, @typed={0x8, 0x46, @fd=r1}, @nested={0x11c, 0x51, [@generic="afb80f564df9c8d8627c428833e38df945a10cced169276b4a19e6fabd1bfab98d92755779db19c0cedfe739d4645454e17f44083eb70c22f6faa04116901f2b870f9f2eb7cf93da4e09c2dabee6bedbd2183b848b0dd49d6858d2cd084447a1c82108ac390c02c6a7335aea", @generic="50048748dc7f7c0bc864227c1637d90d81e0f8f07edf0ad6419242e9806503fa458183c84aa7cfcb5882ef1875931ba5dae4a1532dc803780a3a55a07aaf8800539b9b0e53223591f3e41dcc187c5c068eb78f98427ba41fb4208268b28cbf34fb6782f4b5c860392c462184d0f858538edeb179a9b465d30351328f07def94f11e59f8407c4bee827b9fb90292c9dded87c2be5086f342c58a57035ed3cdd33e46a31cf079853103524"]}]}, 0x54c}, {&(0x7f0000002780)={0x1024, 0x36, 0x0, 0x70bd2d, 0x25dfdbfc, "", [@typed={0x14, 0x95, @binary="df4349d71122b9c72ce15fd54f3f05"}, @generic="f3208fd2783920d08be3c8c4a074ad652d15b18c74829fcbde15817e01217860a3740c2fe7d19cdd2ac8c78f4225765d4bc2492b3ab21bb5265ee244554f6874ae56841260519fc241f76b42fa76af94fcbc2fe65b3e20c44de9085f197d9e165a4b305af85681b5c68ed63c8f3cc9d2c7ce1df3f32001fc932961374452ba7f2c7e0998e1a3740fc6c2e8e62c49f9620bab1c8828c232961fcea0152a2b32f4e3c8f446180cb5e15c161ba0d576dbe6007e309f20a7c2539e983a45f5a2b2f569de6a00ffd8135ece99f2b569ffeb7dd41fe904c7f39a25632d0019f477187e9f93799e7fab6d2b26706faafe26c99aaa8c6196b2d673c777dbb17881eb91f5e3f5a927252d3d4bb86372027d7868f9d2ab2fe51f7201f932072650f88401a6aace22805dddaa0a15f7fb7b3b1d1b31ed35ea63a8c3eb5cab09b00064a779cb3eca075269f1be3dab20fe235ae56e93fbbef5b3ca30e47a114bba4600e1348a6714f7b3726813be2da5bbd5685ec53fde7b53dd940459485dfae8c1e2d0e71ad74e17f9736f2cc961b6a6786e1d5f3b5f256f8778eb79b5a208ac684c30433fe38f736630f88e8a180fe615a945d00dd8851c210f1c85c01cb2b695505d772f829c8c84c25539b637bb6552c152a840adf977ac7ba3f7c87e5101a5422934e7e456149ecd282dc76c85b2d1114ccaa65c510d2252e47f717c59ff7788f876da804a10695b70bf9b81726bdba41ec969720fdab197595996f029995f3f5aab4c63047a377d7283371d543ebbdfe3a6b3e6bbc4b117bae9443720bd462b1e2e71d41628e4910a0069252f84121044eac3a250edc01a96d21e13fb6004d7e70862b38a906eeceb00705dd90f5bbaad4661a018a16c361134f2d3ae24bdf6e0be68b4ebab3baf31e1831124892be6582d32dd207a51ab8e24522743fbfcc7d7920e91e438d0d818aebbad0d4ba6defcc440fb1276cea551bddb73216f0093475c2b5809df147891d24b4ef3ef46d21a303efe9f8f7fa5c352cde099f2a9a57bd2d5bfb6915850efb3be8b66372dee3b8b409201df3d61ffbe4d950c9adcfd4441ae6f5098252f07c6db8897f9d4ed64de7659b1e930111dc45d34bbb7617d56143348dc0fda89abb72830e3df035f2bd8806c4c08422b1798e6651e6d3333f86146475f5a435c84e50fb4a6cabc6df4b9d9fd36addabb05d17744d6a806fda139ceb84b7812ed58e18b8285fedd7c3fe0db0de370b0e1eee43378842a08dfbc53f130c298ff4ae01c4ae9cf2a60da1212ac9e9e4f54fe9b8d8c8cc125eed25f236cfde573e4436acbd073266755e1366b8ecc87980200bd92bf0668534b8812872b54f3c6e837b90fea802ff6d75e58863aa7ace67419d1da304536b4d116b934078c159902efd18db383861161c705b731fb2e3e0944c9a555c737cf845e327b6fd006680f36ef8ad75d7c224422ce5219338b72a742b4c8e38e3e2d4a3264936112e635ac864ad3fb19990e79b32697c12cbf898a7e817436793189212c9313bdd781ebd56a58df046b17ef7f80fe9ebe975482ac28dbf66168b41e53b4e3cf39230d9f094b7aa152eaafb24c25c70bacdd93fd0f6c46eed2b51be43e38288c43e0881aed2364250287b6400aeb866f3aadf573b0b93325536aa716557f0884e6c3c783e05ffe05b3bc11d43532bd23c6bceaa58d7a1689dfcbd32a3f3dea981f195df584ee012df09916c30ef8ce742743f65ffcfa6babe398a5ecedb81cc13b2652e796a5fb55eb54cf619b2a44ec1228076745901424b5f77e82d9395a14491633fe1621f385536212dead812272768146d50e61f3cafef8cc7cb58b7ef9ab2213a0ea39150016d67d85ff6462a39100a266db70d917b3940c43b3f485fc5677bd18d97a3240ff9db15f775db8d4a6bfb6bf4dd528a6741106f4ecc3c1ac0d0e307ab1b4efb77ef962890cb7935a28eb0d3eb0270fd8d50ea2112fa339fa5388ed6e87bb246e1fb6941f436911a8f990e9cb4505bb4b8a20f5ea73024dccb7990739d0359e42dafa3563834938e1811d70a23ee6317649896417d1d66c8cdb1134fd93e55ca10b65cab1a67f1dc6a602890dd672d335a574c31ea3ca4cc0a5e9dcf5a9dd16b595b3c305c700cac95fd975a6e6313387e1ad7abd34fb4eb1e9f79becaab05ce497db5fd4640fa4e8e1d1af36ffd4b3b28bbbb65e66c0084dc769482f0cc770dd4b2deea4db0d12b9a0570988b9bc1345454d8b4f9cb9996930a69aa455acfd8d9a3aa66e0bb9acb7f785b5c65ca3208708376c35bea9d827a4ac27c6f53c5fff03f0334a17bb15dae09980d8bd667cd246bd27acbb714af56d0e21b9c5fafb0bf26f1c1bc4563afa26131278ec092f5be8513fb54bd77dce7f7a7cbf359ee4c0b7a210746a71a10c640b1cb361ab2b00ab8f188818661972058fbc7aedb9888361f93cb13d98e1186a6f0f446ad9d42e56274908eace0c61a62f1d76303b98d5bd5cb5cd0a293a866d9a5d8caedd026a203cc91884cf84b18c265d5606e536e644f381afeff21e146dd49d2967c1393cb06b069f114fa8c4023ec633240101a34ca17fc45635352f91bdc9452978725476f01adc5cf8ce4ddff33fa02db411ff9a15af2679e0a5ab91370edf3569d0b28419bd7fa765cdf6ce2b84cce84f2973ea1a151ab6e01c4fa9eb813527e9075df8cf6de8d696b4c0fdf4396b11d26693a8c34327101e14dcf60f74fc299e12afa0feb2d0104a539172e42becf21e492ef899b0b71204ab238d363ac9945e4458d1be96fd372b1eaf1a9486cd685163aafa0e182440acc1415d12ce6da1fd925d92030b6b54769335a157dd96ff8e48f3e5eb468d72fc7705f290fa637cec8722f6b24629cf57f6f12074d42dc14d20dc6455a04d62bcb106cefcc89b3c375b8070a90a52865c7efa26a2d2300fc46244a17a1dad1e2e154fc78b4c9da6f736a71810bf228fa3f5da196eb27322402e07073af5e1dc27c12e27549a25d2603cf3ac14d2e421c7928fa32d24b88f924e688ee4ee228f4c4daec77d6184a19b02b42fa0797cdabf2ee3b9f11b8efd98c7528be77448f6e84f5518077cf2282518ace03312dfe0a987448390b4caa9272bace9466cbd89bd024a1728ab889013a6516565ce6f61eb2c50d0b5fc2f05f45e48490408aeb84d06fe489b6d4334e523a96821bad4958aa12e507ecc93679c0984ccae1fcfc28e71b948b3cfca9f2ee9304424a09265efcaf6806e4f300260ac3ec40626b09b71635afd3c2835d9ed4ecb6c7ddeb9b47b2fb6968b77b654c5bbbd7aac5a47eb6774e96935e63c0ae4f2b96beb82077c2b90bb7ee4027dd93fcdf404ceddc94bc929637576fb615025aa4e44d15279b161d94d5484aba00b094781e62dc4c2d640dcff6440578c79c9cffed39583ff71381050ed8eb18585a23f4f56ae65cfb110eebfa0823645066fec3d42a6c3d140c4362f4858a7a9a73924b2c1905a8cc08655197b9170ea3479dab0c6a7c6142256b3d1759bf593d8b987916c7b7f854f7d3ad53c51ea24180c525618b6ecdf446c0e03f281077e159a78cc6dab48cbf2a967973dc57bf631794baa837f7e301a1520e49e74a0c2e9e85de2caf5dbb3961112582cba38e48e46b97efd5b045edcb9207eef840a91873c9848d984a21e6575bd8cc964f818b4e7224dc18518aebe7f9d154047cbe5cb52d8d8a5b179f503f331824b79487e696061c3a64af7ad2141bb4ad849a4bcae70020fa4e41eb5366367a84a1d20e7d76789b72af1804a1e553a02a236706650dc0d7078f042a22e8787d8db392b587dbc4a585f16d0f573a7eb072e53f659853477f4783887a0f801f35e84e27e790ae32dd1c794747c545216f847a04a007c82e26994b4ca556070057b4ed71f962fda6eb631e5f85a447e61f3c757e0e8bce05fde3d8cffe3c794c2270a6e742fa42d465900808b29757aeeea28f28f241d5d2635f1ef3d07ed1d60370c49fc30d6903ac34798653d9ec262e20e28ea3dd9ec8e03820609bcace2b8681a5cc73e76aae6006a945938a906a30d0b95f760b4be6beffbe055da3d2f38e6c910126b14b5831dfc4544dee4cee9b1f19ba94adf169f26cacdfb931e859cb986007f7eaafc3c6e8d829dd2316519fd33c1d475ad9224046484396cb2933ea43888737a4b4396795bfbf8becebe4206bddeb605974ab04e263ce01cbe9d0a607e29b4467e3083bcc5cab23901d14f48e22f828982516514fe8b564bbc30527a389e2cc3c94b80b5fe18b43c8d71c0f209ff5da5396f2ac46597b5a96a333e0176fe9ce658a91ea284015d3fa7fec30a7fb2181b69c8e007e95a0c4bb0ca94697b98dcc39ef70dedddb703605ea1eed6d302dcd4ea5d21a73ec71eb4bad9989e34f94d034a2b43a7ba6fe54d29bae5aae921dbddd8ee7753acb25f4be2109ee1d2868b28da0068ee6f7a1070f05e13d75a69d2fc5371974d13d8f9daf0f727156c297f379198949c81ce2cd74c3e048c3d919106bb424516f230a10347eef2e3612cd9895ccfdfe58a7c33f7eb4fa87fec046e3fcd231b3b2bd5f0fcb2ff418e7f055c2065f90e56991eea025d7ae7e2aa23e663b7804027a0e380e89c687a996503175af00c098f057fd575a1f633f4b1a9057ca0d7bcf9a641bbe2c315499c2c3558da6184c789db358c2851553b6c556c57221bcf9e96da0ca155419b5c48edfd2c23ff969aa79b5ed7609ec6c3db0ac59858468060a2a2a70d64d1641c3cadf3980caf5813538d362163321bcd60f514e10ae3aa0a8033b952ace1ebe1f0195d507f0b1f4777d437dcd5c6d0fbc6d362aaa986013659deac82fe8d50962020569aa88c8e34dfe67815989d52d9353e57675824209b17a28b8bd8b905a61ee905cf07b1a142afab4b684a0aebfcfd79598c8e47c8bfdbc5e05771272435728fff6f83f4514017816fb4d5cb9bb0332a294f3b37051fd82495b10887fa346de32aa19060f4efceaa3eb6b14eb666ae5b3a78c4ec14116d143feb8708df9b6c7c252350bf375118f59f0089a1051b067ae33aef2511d2eec6bb524bc65cb6b99509b3d6539f8b64618d45a22791e33e787086af7464aa9833f2a99391f041fb7a368962a4c6365fbb56e39bd69157253c0a98d27bd91d79eb42e08c97711d445e92fb39b4014c8f8290f9faaba5f661a33279b948ec2631d2e0838c9f5b3a765eaf2648a093ee1311e20ce19f7b276922fd2a8506ae3573a6052cd07236f00e2e8c5bb28468c7558788d8b4929fb09040c5e3a8f629f5ee620a974b5ba8cccf840482678fafb72f55d65047cf3bfb8fdc62fbc3f48c9f53f07a4aa4ccf2b11d5ca961e1d4cba2a1a6506cfe478c8672fe75315cd2a50ae1fe4b41fda04099c8da35c3d494ccfa9ce94736d6d7b15f8770eb64f174da727dede59bb288e3949b0cd7039fe933686c0cb0bdafc6ad3f61dd7b6d6b5794c62c47e176e20ba22a494290ca77bc7df3b01709684a8ac5e4f2a47fb32a3961c0dca17639a6b01f2e835a95e5f9564362f8ae786b32e1d2dd72b0b6b517085298279b23e63a9607eee35ecf557850e293c28fa94121536237443cf7086cc9013590bb1e47dd45bbb8d45cbb09dade1a01c3aac8695feb3f96e6230f963e5c8fe9fa0fda35baa07490caee9044eec73ea1c9263ee05e1c566e9f322fae0868c50995dbd8d4de98655b1be6770b8851296b85cb0613e8f7a628f074c302860170e3452c31282603eeab7077ce7de3fd1554b52d67964ce89d3e1321"]}, 0x1024}], 0x6, &(0x7f0000003a00)=[@cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @cred={{0x1c, 0x1, 0x2, {r12, r13, r14}}}, @cred={{0x1c, 0x1, 0x2, {r15, r16, r17}}}], 0x60, 0x8000}, 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:29 executing program 2: open(&(0x7f0000000000)='./file0\x00', 0x22040, 0xc0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 17:06:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) flistxattr(r1, &(0x7f0000000080)=""/14, 0xe) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 1368.826174] binder: 10424:10431 ioctl c0306201 0 returned -14 [ 1368.861137] binder: 10444:10447 ioctl c0306201 0 returned -14 17:06:29 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) personality(0x4000000) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = creat(&(0x7f0000000000)='./file0\x00', 0x1b) write$selinux_create(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="7379737410bf5f753a6f626a6563745f723a756e636f6e66696e65645f657865636d656d5f657865635f743a733020756e636f6e66696e6564203138343436373434303733373039353531363155f6cae1901d5c34bcaed199ef02713000"], 0x4f) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) tkill(r0, 0x34) 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) finit_module(r1, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1) r4 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$P9_RWALK(r4, &(0x7f0000000080)={0x23, 0x6f, 0x1, {0x2, [{0xc1, 0x3}, {0x20, 0x3, 0x5}]}}, 0x23) r5 = getpgid(0xffffffffffffffff) setpgid(r3, r5) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000040)=""/254, 0xfe) 17:06:29 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x8dc) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$P9_RWALK(r0, &(0x7f0000000040)={0x16, 0x6f, 0x1, {0x1, [{0x25, 0x2, 0x3}]}}, 0x16) close(r0) 17:06:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) r1 = socket$inet(0x2, 0x6, 0xef) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000200)={'nat\x00'}, &(0x7f0000000280)=0x78) keyctl$setperm(0x5, r0, 0x0) clock_getres(0x0, &(0x7f0000000040)) fsetxattr(r1, &(0x7f00000002c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000300)='nat\x00', 0x4, 0x2) keyctl$get_security(0x11, r0, 0x0, 0x327) prctl$PR_GET_NAME(0x10, &(0x7f0000000080)=""/158) lsetxattr$trusted_overlay_redirect(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f00000001c0)='./file0\x00', 0x8, 0x2) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1368.891356] binder: 10454:10457 ioctl c0306201 0 returned -14 [ 1368.923447] binder: 10437:10469 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:06:29 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$dupfd(r1, 0x406, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x200, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000140)) close(r0) 17:06:29 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x68, r2, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x35}}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xa}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17:06:29 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffa) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000000)={0x6e34, 0xfffffff000000000, 0x5, 0x80000000, 0x7f, 0x6de6}) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1369.008272] binder: 10509:10510 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:32 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7ec, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000001000)={r2, &(0x7f0000000000)="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"}, 0x10) tkill(r0, 0x34) 17:06:32 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fchdir(r0) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 17:06:32 executing program 1: r0 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000140)="fbc248c4131971e317a0667396437a4e463e7e", 0x13, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x0) r2 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000200)={0x20, 0x2, 0x6, 0x6}) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r1) keyctl$get_security(0x11, r1, 0x0, 0x0) keyctl$set_timeout(0xf, r1, 0xffffffff00000001) 17:06:32 executing program 0: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2a8, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbce}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x571a775e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x329}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x562}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @empty}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x4) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000280)=0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}}, 0x4000001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000e00000000"], 0x0, 0x0, 0x0}) 17:06:32 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="94000000", @ANYRES16=r2, @ANYBLOB="04002bbd7000fddbdf250f0000000c00020008000200ffff000034000600040002000400020004000200080001000500000004000200040002000400020004b54b5007cdd0c7c8e8d8f92f69422300020008000100ff000000040002004000020008000100ff07000008000200060000000800010026000000040001000100000008000100060000000800020009000000080001000105000000000000"], 0x94}, 0x1, 0x0, 0x0, 0x840}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) socket$inet_udplite(0x2, 0x2, 0x88) prctl$PR_GET_TIMERSLACK(0x1e) 17:06:32 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x20000) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 17:06:32 executing program 1: request_key(&(0x7f0000000380)='blacklist\x00', &(0x7f00000003c0)={'syz', 0x3}, &(0x7f0000000400)='TIPCv2\x00', 0xfffffffffffffffe) request_key(&(0x7f0000000440)='big_key\x00', &(0x7f0000000480)={'syz', 0x0}, &(0x7f00000004c0)='/dev/full\x00', 0xfffffffffffffff9) r0 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f0000000540)={'syz', 0x3}, 0x0, 0x0, 0x0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz', 0x1}, 0x0, 0x0, r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x100, 0x0) write$selinux_access(r2, &(0x7f0000000080)={'system_u:object_r:auditd_initrc_exec_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x800}, 0x56) keyctl$setperm(0x5, r1, 0x280000) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000180)={0x16c, r3, 0x401, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xe8, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'sit0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0xcbba, @local, 0x8001}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x6c, @rand_addr="0c739a348539ae1084e441c036e1fb84", 0x70000000000000}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_BEARER={0x4}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x28, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8f69}]}]}, 0x16c}}, 0x4000000) 17:06:32 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r3 = fcntl$dupfd(r1, 0x0, r2) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x2) 17:06:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) 17:06:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$ppp(r2, &(0x7f0000000180)="15736816eb62dce67f879927858991aeb080ff7eb32708cb07634b6cbe3a9595bbdc5efc952d214baa3093ef7423400c19cfad8e3cdb640929b81afd153c635a47824cf29dca06e230db1e66eaf512f2a41ed4281850f441013f6abd9266d2f610b25d8b3073c9c87b2d9219facf3f346bf4cea7fdcf4aff9dff779d120db16c0df505e5c52161828fd839bc4e8ba82fb07c0b57e9c29fe0c8e5b036b3483f10f800b1dedaabe86be853a39987ebb23e867f685e17336bc5a4b558764a14e742bdad707ab4129221c35cf2fe3159110e847278f13ed8a7fd58bd944f793580f5c295fcb6b7410797d5ca01083e14b2c38d502733eb7d25", 0xf7) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:32 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$setregs(0xf, r1, 0x6, &(0x7f0000000000)="f4f9bc76fa1d44e1d8a7180f87e8d1d5a3f591f58e9112a6ab557d87101405f581be13") 17:06:32 executing program 1: r0 = request_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000140)='syz', 0xfffffffffffffffa) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xcc, 0xcc, 0x8, [@union={0x9, 0x7, 0x0, 0x5, 0x9, 0x9e1, [{0x10, 0x2, 0x1}, {0x3, 0x0, 0x1ff}, {0xd, 0x2, 0x9}, {0x9, 0x3, 0xfd7}, {0x10, 0x5, 0x100000000}, {0xa, 0x1, 0xfffffffffffeffff}, {0x8, 0x1, 0x8}]}, @union={0x10, 0x8, 0x0, 0x5, 0x54f58ca5, 0x7, [{0x0, 0x3, 0x10000}, {0xa, 0x4, 0xffffffffffffffff}, {0x6, 0x5, 0xdf}, {0x0, 0x4, 0x2}, {0x9, 0x2, 0x8d}, {0xc}, {0xd, 0x3, 0x6}, {0xe, 0x4, 0x6ca}]}]}, {0x0, [0x71, 0x6f, 0x6f, 0x71, 0x2e, 0x2e]}}, &(0x7f0000000280)=""/113, 0xec, 0x71}, 0x20) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000340)={0x0, 0x3, 0x2, 0xcd2}) keyctl$get_security(0x11, r1, 0x0, 0x0) 17:06:32 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@sco, &(0x7f0000000080)=0x80, 0x800) recvmsg(r1, &(0x7f0000000440)={&(0x7f0000000140)=@x25, 0x80, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/30, 0x1e}, {&(0x7f00000001c0)=""/155, 0x9b}, {&(0x7f0000000280)=""/87, 0x57}], 0x3, &(0x7f0000000340)=""/209, 0xd1}, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0xb8, r2, 0x70ba42d5d3a8772c, 0x70bd2c, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x30}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'sed\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x11, 0x22}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x80000000}, @IPVS_DEST_ATTR_TUN_PORT={0x8, 0xe, 0x4e20}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x99d5}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x4000000000000}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0xfffffffffffffe00}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x44804}, 0x4004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:32 executing program 1: syslog(0x0, &(0x7f0000000040)=""/94, 0x5e) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x400000, 0x0) ioctl$BLKIOMIN(r0, 0x1278, &(0x7f0000000100)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='cgroup.events\x00', 0x0, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) [ 1372.007907] binder: 10535:10540 ioctl 5411 200000c0 returned -22 [ 1372.033415] binder: 10535:10540 ioctl c0306201 20008fd0 returned -14 [ 1372.090808] binder: 10535:10575 ioctl 40086200 200002c0 returned -22 [ 1372.098097] binder: 10535:10575 ioctl 400445a0 20000280 returned -22 [ 1372.108859] binder: 10535:10575 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 000000000e000000 17:06:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$ppp(r2, &(0x7f0000000180)="15736816eb62dce67f879927858991aeb080ff7eb32708cb07634b6cbe3a9595bbdc5efc952d214baa3093ef7423400c19cfad8e3cdb640929b81afd153c635a47824cf29dca06e230db1e66eaf512f2a41ed4281850f441013f6abd9266d2f610b25d8b3073c9c87b2d9219facf3f346bf4cea7fdcf4aff9dff779d120db16c0df505e5c52161828fd839bc4e8ba82fb07c0b57e9c29fe0c8e5b036b3483f10f800b1dedaabe86be853a39987ebb23e867f685e17336bc5a4b558764a14e742bdad707ab4129221c35cf2fe3159110e847278f13ed8a7fd58bd944f793580f5c295fcb6b7410797d5ca01083e14b2c38d502733eb7d25", 0xf7) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x113) keyctl$assume_authority(0x10, r0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@rc, &(0x7f0000000180)=0x80, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) getsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), &(0x7f0000000280)=0xfffffffffffffcc1) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000080)=""/36) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e24, @loopback}, 0x10) write$FUSE_IOCTL(r2, &(0x7f00000000c0)={0x20, 0xffffffffffffffff, 0x5, {0x10001, 0x0, 0x80}}, 0x20) 17:06:33 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$UI_END_FF_UPLOAD(r2, 0x406855c9, &(0x7f0000000080)={0x3, 0x0, {0x57, 0x80, 0x2, {0xf6d, 0x7fffffff}, {0xffffffffffffffe1, 0x80}, @period={0x5a, 0x3, 0x6, 0x400, 0x0, {0xae15, 0x7, 0xdf9}, 0x4, &(0x7f0000000040)=[0x20, 0x4, 0xfffffffffffffffe, 0xfffffffffffff800]}}, {0x52, 0x9, 0x1f, {0xffffffff95a114f5, 0x101}, {0x81, 0x7f}, @rumble={0x3e, 0x6}}}) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) write(r1, &(0x7f0000000140)="67fcf237634786cf0fcefa0dfa3fa94228a34bcd5e21f8993736ece653d2849b55800fe52db4ce19811cbd95eb3566395bbfdcb341a216d01e04f940b2c2cf34f3dc369b0f087321c7a89fd7bf2550d22ef428cb48a947f6af5d4f7b35424ede1ae21f1d05897ad4c607232d222167d3c120dd251531a3f76a15478ef3df62478edf05dfbb732b947370427b2964f2cbc0073e25e2d86d9cacf39a071f545adbcac15b", 0xa3) lsetxattr$trusted_overlay_redirect(&(0x7f0000000300)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f00000002c0)='./file0\x00', 0x8, 0x2) creat(&(0x7f0000000280)='./file0\x00', 0x98) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x10000, 0x0) ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) close(r0) 17:06:33 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) getpeername$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000080)=0x14) ptrace$setopts(0x4206, r0, 0x0, 0x2) tkill(r0, 0x34) 17:06:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) fcntl$setflags(r0, 0x2, 0x1) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:33 executing program 1: r0 = add_key$keyring(&(0x7f00000000c0)='keyring\x00', &(0x7f0000000100)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$setperm(0x5, r0, 0x0) keyctl$setperm(0x5, r0, 0xb74c34598fd5d99a) keyctl$get_security(0x11, r0, 0x0, 0x0) [ 1372.729220] binder: 10535:10575 ioctl 5411 200000c0 returned -22 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x7) 17:06:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000000c0)=0x80, 0x80000) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/policy\x00', 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r2, &(0x7f00000002c0)="3ed155be3ad8866018290e4400e156973be53dfbba85eea5e21cf4b124b54667e14566c208bb7258d6d4f274e1603c8291f6be1d6dfc4812ac1a52984301b1a1f9ca5eb92e86f7ae2163f057694fceee789548c76e81b18f3fc1a726361e2e55558a0a9f62b20ec7b0e5857bab84240088f9c3e09ab48c746cf21632d2e6a30c14866545dbf41bed758e44655a139d7c723822827cc409690a9b3290aae56ac8e3a0798515232e90612ec43924b44dab1629671873fabd69366f063429991986b9c3ce733ec18638147df442ad1b53c3ac2fe4dcb9564d8094ef3730410eb4adfa1fd2ddc9b5858b56b1eb999827", &(0x7f00000003c0)=""/15}, 0x18) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000140)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="70f10a00", @ANYRES16=r3, @ANYBLOB="000027bd7000fddbdf2503000000140009000000000000000000000000000000000014000900ff02000000000000000000000000000108000600e0000001080002000a000000080004000000000014000900fe8000000000000000000000000000aa080001004e200000"], 0x70}, 0x1, 0x0, 0x0, 0x4001}, 0x4001) 17:06:33 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0xfffffffffffffffe, 0x0) tkill(r0, 0x34) 17:06:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2a8, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbce}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x571a775e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x329}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x562}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @empty}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x4) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000280)=0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}}, 0x4000001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000e00000000"], 0x0, 0x0, 0x0}) 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:33 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40000, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000040)=0x3) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:33 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) inotify_init() fcntl$notify(r0, 0x402, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000703000/0x2000)=nil, 0x2000, 0x0, 0x12, r0, 0x2) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:33 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) write$FUSE_OPEN(r1, &(0x7f0000001380)={0x20, 0x0, 0x5, {0x0, 0xc}}, 0x20) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x60000000}, 0xc, &(0x7f00000012c0)={&(0x7f00000000c0)={0x11d0, 0x2, 0x7, 0xa, 0x70bd2c, 0x25dfdbfd, {0xd, 0x0, 0x2}, [@generic="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", @nested={0xd4, 0x29, [@generic="b373713a7ea9e231e61308e45663e7b3141de425de8decba40722ef2bb8ac09401c7e0e55a31e77f8f58f39d0ab9ff6cd2dc1f4b12c3304d57d3857dd3e55463a589293619dfbd649db3d53758b3d8e67d77d88d4d9207df0c093cbff87ef4bb23c88ff6a6f5bfdf97be0c5557a1a064f684a98305025caf96044cc2d25199fe1857bd5498e4bfabcc5672134e78b97fe5612023256ca7e67a06f8ca0a9d87c1428766dee61f049e", @typed={0x28, 0x61, @binary="a874359aa30c78282085e208e9bd943a228af77f7c1e605ba6672edd454ef50e7f38"}]}, @generic="b78c679fd8154962c351f46deacb383f92306af4de559cc73bc6c16564e6c66325219e75c08172979fcdc83212b79a4ba4bc87e178906e3cc606d4d0663b28146c01f98fa04b91501ed39d8a9c750996d2f92ebb5b870b1021c34484386288d7c52387b3f08b35f66334e77ef841f90bb8bf9306b0ee3c9becf10c682a7444695f0674280c4debcf4e8962d7a23b0cc3f3cec864b5a09ce18f82bf23c1782927c082eaab96b75180b7", @generic="99a10d33be838612a8da0328f6c770b2258dd20c995fd43550487037a0b236ae2695b85e18dc3db4f670db9893fbff2c3792d3262153cf4c7c09cbaae9a5"]}, 0x11d0}, 0x1, 0x0, 0x0, 0x48000}, 0x4) keyctl$get_security(0x11, r2, 0x0, 0x0) 17:06:33 executing program 1: r0 = request_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000000c0)='vmnet1usertrusted\'\x00', 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$search(0xa, r0, &(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x0}, r1) r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x0) keyctl$get_security(0x11, r2, 0x0, 0x0) 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200000, 0x2) ioctl$LOOP_GET_STATUS64(r2, 0x4c05, &(0x7f0000000140)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:33 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x16d000, 0x40) connect$unix(r0, &(0x7f0000000040)=@abs={0x1, 0x0, 0x4e20}, 0x6e) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r1, 0x200, 0x70bd2d, 0x25dfdbff, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40040}, 0x4) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() ptrace$setopts(0x4206, r3, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f00000003c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={[], [], @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@initdev}}, &(0x7f0000000500)=0xe8) getresuid(&(0x7f0000000540), &(0x7f0000000580)=0x0, &(0x7f00000005c0)) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000600)={{{@in=@local, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000000700)=0xe8) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000000800)=[0xee00, 0xee00, 0xee00]) getresgid(&(0x7f0000000840), &(0x7f0000000880)=0x0, &(0x7f00000008c0)) r11 = getgid() lstat(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() getgroups(0x2, &(0x7f00000009c0)=[0xffffffffffffffff, 0xee01]) fstat(r0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x7, &(0x7f0000000a80)=[0xffffffffffffffff, 0xee01, 0x0, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff]) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000ac0)={{}, {0x1, 0x2}, [{0x2, 0x0, r4}, {0x2, 0x1, r5}, {0x2, 0x0, r6}, {0x2, 0x1, r7}, {0x2, 0x1, r8}], {0x4, 0x3}, [{0x8, 0x2, r9}, {0x8, 0x0, r10}, {0x8, 0x6, r11}, {0x8, 0x2, r12}, {0x8, 0x0, r13}, {0x8, 0x4, r14}, {0x8, 0x1, r15}, {0x8, 0x1, r16}], {0x10, 0x6a00a89af57e7c33}, {0x20, 0x2}}, 0x8c, 0x3) ptrace$setopts(0x1000000000004206, r2, 0x8348, 0x0) tkill(r2, 0x34) r17 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000200)={0x0, 0xfffffffffffff001, 0xfffffffffffffffa, 0x7, 0x6, 0xffffffff, 0x59, 0x5, 0x23, 0x8}) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x24de3f8f396d436a}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r17, 0x20, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x0) [ 1372.920878] binder: 10647:10650 ioctl 5411 200000c0 returned -22 [ 1372.935775] binder: 10647:10650 ioctl c0306201 20008fd0 returned -14 17:06:33 executing program 1: add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$packet_buf(r0, 0x107, 0xa, 0x0, &(0x7f0000000180)) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r1, 0xc000404) keyctl$get_security(0x11, r1, 0x0, 0x0) getsockname$packet(r0, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000280)=0x14) connect(r0, &(0x7f00000001c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x3, 0x4}}, 0x80) r2 = accept4$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000100)=0x1c, 0x800) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000140)) r3 = dup2(r0, r2) ioctl$RTC_AIE_OFF(r3, 0x7002) 17:06:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f00000000c0)=0x0) sched_getaffinity(r3, 0x8, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x880, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8080100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0xc0, r2, 0x408, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6tnl0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x80}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}]}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vcan0\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r3) [ 1372.973595] binder: 10666:10681 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1372.974557] binder: 10666:10682 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:33 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000700)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)={0x2a8, r1, 0x10, 0x70bd2d, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7c1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xbce}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0xe0, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x571a775e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x329}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd5a7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffffffffffe}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_PROP={0x14, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x16400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfc}]}]}, @TIPC_NLA_BEARER={0x10c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'erspan0\x00'}}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x562}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x65}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8}]}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x37c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x1, @ipv4={[], [], @empty}, 0x7fff}}, {0x14, 0x2, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0x2a8}, 0x1, 0x0, 0x0, 0x8040}, 0x40) r2 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000000c0)) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x21c, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r4 = dup(r3) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f00000002c0)=0x4) ioctl$EVIOCSCLOCKID(r4, 0x400445a0, &(0x7f0000000280)=0xc) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x24, r5, 0x0, 0x70bd27, 0x25dfdbfe, {{}, 0x0, 0x4, 0x0, {0x8, 0x11, 0x4}}, ["", ""]}, 0x24}}, 0x4000001) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000e00000000"], 0x0, 0x0, 0x0}) 17:06:33 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r1, 0x0, 0x80000000, 0x0) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/uts\x00') ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:33 executing program 5: r0 = socket$unix(0x1, 0x5, 0x0) r1 = getpgid(0xffffffffffffffff) r2 = geteuid() getgroups(0xa, &(0x7f0000000600)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee00, 0xee00, 0xee00, 0xee01, 0xffffffffffffffff, 0xee01, 0xee00]) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000640)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) r6 = getegid() r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r8 = openat$zero(0xffffffffffffff9c, &(0x7f0000000700)='/dev/zero\x00', 0x44800, 0x0) r9 = epoll_create1(0x80000) r10 = gettid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@multicast2}}, &(0x7f0000000840)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000900)={{{@in6=@initdev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@broadcast}}, &(0x7f0000000a00)=0xe8) stat(&(0x7f0000000a40)='./file0\x00', &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000b00)={0x2, 0x1, 0x0, 0xffffffffffffffff}) r17 = accept(0xffffffffffffffff, &(0x7f0000000b40)=@xdp, &(0x7f0000000bc0)=0x80) r18 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) r19 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000c00)={0xffffffffffffffff, 0x7, 0x18}, 0xc) r20 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0xb, [@struct={0xd, 0x3, 0x0, 0x4, 0x81, 0x8, [{0x0, 0x2, 0x80000001}, {0x3, 0x1, 0x488}, {0xf, 0x0, 0xfffffffffffffffd}]}, @fwd={0x4}]}, {0x0, [0x6f, 0x7f, 0x2e, 0x30, 0x30, 0x3e, 0x0, 0x61, 0x30]}}, &(0x7f0000000cc0)=""/106, 0x5f, 0x6a}, 0x20) r21 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000d80)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000dc0)={{{@in=@initdev, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000000ec0)=0xe8) stat(&(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r25 = getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000fc0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@mcast1}}, &(0x7f00000010c0)=0xe8) r27 = getgid() r28 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000001480)='/selinux/mls\x00', 0x0, 0x0) r29 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000014c0)='/selinux/checkreqprot\x00', 0x80000, 0x0) r30 = openat$selinux_access(0xffffffffffffff9c, &(0x7f0000001500)='/selinux/access\x00', 0x2, 0x0) r31 = epoll_create(0xd99) r32 = dup(0xffffffffffffffff) r33 = socket$nl_generic(0x10, 0x3, 0x10) r34 = openat$full(0xffffffffffffff9c, &(0x7f0000001540)='/dev/full\x00', 0x101000, 0x0) r35 = openat$tun(0xffffffffffffff9c, &(0x7f0000001580)='/dev/net/tun\x00', 0x20000, 0x0) r36 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000015c0)='/selinux/enforce\x00', 0x0, 0x0) r37 = socket(0x4, 0x80003, 0x9) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001600)=0x0) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) r40 = getegid() r41 = socket$inet_udp(0x2, 0x2, 0x0) r42 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000001700)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) sendmmsg$unix(r0, &(0x7f0000001800)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000080)="397d0b4aaf0a9a9946d157d54e1b9dbb693083edf8f6c25dc49866da1567116b0f202bda11d6e713d09a96755891ec6d967d1c421aa2060bb96bf47544b366db3225f840158cac18e74dfbd08b26", 0x4e}, {&(0x7f0000000140)="f72266530de871f562c7445b9a127b934471d7ef15ffb5eb18db45bc0dfe44291d20e60975f81f265ca117436ddb4c4e159d3bb0eddefafb3fb319d3b43fba6ef63a6ab0aa58acca5e7aeff636a11d71a08390d36338f126dfafcd678b27639e38870a29309a0493d67337", 0x6b}, {&(0x7f00000001c0)="8cb1ed3101812bc79a11f4e909d3a9a6f7e9f36e04175a2a8d65c57199c4a53fc274b14030d61e8ae97f34ab910bbdbf6312503c7e840f81b15e415423494679c73dccd79e20f0d941ff16514e41ea415bdb2c90958c71e4c533993100b046bd924ae65cbb7aca2c1bcb37a18e9b8630c2a3aa8bd1f7961dd639f789dbe55081a7a13613e5331e2013795ca30e913866e9f5f8ed08237fa87f828f9fa87feb4c713713adcd53c8c94dff35e0cdc818bc694ece89451db0c712a308cc0436376b", 0xc0}, {&(0x7f0000000280)="68b31e192169d4f25e2bd9d2d2a2239692f1b1dceed823462f84daf53b0a280630c636650acf3ea880b9439516a3ec32bf798b900e9e0a9c67c8ef7519357b12203559a97f377f5a47b21ec4518d80a5a76f812caad10bdce983666efa97a8d9cf5255a0f767e7eee8e61a04f0ca14628d395480b676b8ea54a8d9697c3c76f1e6f9a846272dc1a31562dc96d28420d0b1557220faaed5ae0d3033dd61c56108048c366d0bb1b7ec425afc842231cb1dbe197357c99f9e7f90c0bee0cc6fb855787633eb185d0626138076d4ea3437d6033742c9fc1568e997d6ba6387a06601439d13be18", 0xe5}, {&(0x7f0000000380)="65eec31ca7b6a1bb00a6c416268ee66610f534da83cc897aa89a1c04c398ad397d259623a40295352882562424dad5c968a2df40ad04c71bd7a77e5df5d5261f16bbaa1a26a6024a6d83d31fd7003106eddc535510aae85d0aae8f8b46fab6e5e124d5eeba42539cf829aa52c8a59420718a20fa11a0a21de1575d6027a511bff6bd38a529698ee2437ffcad4cc2c562dedf1cbb21626b97f2619d8d71dc5568b8bb3400cc1b74fefb0f2a434abb0334dbb6319c22837251d132803aba0ca2bfb7e1dad9d44ab8cf0d1be660fb7176288607003b4797e30c4e", 0xd9}, {&(0x7f0000000480)="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", 0xfd}], 0x6, &(0x7f0000001880)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=r5, @ANYRES32=r6, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r7, @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r10, @ANYRES32=r11, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r13, @ANYRES32=r14, @ANYRES32=r15, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYRES32=r21, @ANYBLOB="1c000000000000000100000004aaff6982c9c90002000000", @ANYRES32=r22, @ANYRES32=r23, @ANYRES32=r24, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r25, @ANYRES32=r26, @ANYRES32=r27, @ANYBLOB='\x00\x00\x00\x00'], 0x108, 0x40000}, {&(0x7f0000001100)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001440)=[{&(0x7f0000001180)="f9071f7e8337e21e9806457c4424acde1e7305de0a3efa7071b6adf41a740903b3cda186253199a4e67736d362b49e8f1806923cc0650f178035e555", 0x3c}, {&(0x7f0000001340)="38f6a920a8664b723c469dbfb844343c01a9631ee70137d232f990c05900d09da569edd1be5fc9b1fbee73caaebd07e2ed258c930cd4615fb45ebc3ae89c046bc4905c03428592941474211a43c3ec216fc23a577e307af0e571ecb84600cf1d44112dc619f9e37e6b9ab408910312daa749f61dec7e7360ddce183ee808ce01083d590db6890c6df6bfeb8bf63c39cb2ebe1688dceafb93f217ed8e80fe7578a62c431143f2452a6033503e2f830c084f7dd677c3678d027b40bfde4fa8437908005dd9d64722", 0xc7}], 0x2, &(0x7f0000001740)=[@rights={{0x24, 0x1, 0x1, [r28, r29, r30, r31, r32]}}, @rights={{0x24, 0x1, 0x1, [r33, r34, r35, r36, r37]}}, @cred={{0x1c, 0x1, 0x2, {r38, r39, r40}}}, @rights={{0x18, 0x1, 0x1, [r41, r42]}}], 0x88, 0x4040840}], 0x2, 0x0) r43 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r43, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r44, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r43, 0x0) ioctl$ASHMEM_SET_NAME(r43, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r43) [ 1372.989446] binder: 10647:10683 ioctl 40086200 200002c0 returned -22 [ 1372.989540] binder: 10647:10683 ioctl 400445a0 20000280 returned -22 [ 1373.021083] binder: 10647:10683 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 000000000e000000 17:06:33 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) prctl$PR_GET_THP_DISABLE(0x2a) socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x7) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000040)=""/40, 0x28) 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000000)=0x0) syz_open_procfs(r3, &(0x7f0000000040)='net/ip6_mr_vif\x00') 17:06:33 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) getsockopt$sock_buf(r1, 0x1, 0x3f, &(0x7f0000000000)=""/109, &(0x7f0000000080)=0x6d) getpeername(r2, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000240)=0x80) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r3, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r4, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 17:06:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f00000003c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="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"], 0x2e, 0xfffffffffffffff8) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/checkreqprot\x00', 0x1075ff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000140)='syz', 0xffffffffffffffff}, 0x30) perf_event_open$cgroup(&(0x7f0000000080)={0x2, 0x70, 0x6, 0x300, 0x4, 0x4, 0x0, 0x9, 0x800, 0x2, 0x4, 0x0, 0x314c, 0x292, 0x2ba1, 0x400, 0x4300, 0x8001, 0x1, 0x1000, 0x1f, 0x100000000, 0x10001, 0x400, 0x0, 0x7, 0x6f7, 0x7, 0x4, 0x3ff, 0x9, 0x7ff, 0x5, 0x400, 0x6, 0x9, 0x1f, 0x1b7d, 0x0, 0xff, 0x0, @perf_config_ext={0x100, 0x8}, 0x2004, 0x10001, 0x3a, 0xb, 0x3, 0x500, 0x5}, r1, 0x8, r2, 0x5) [ 1373.155920] binder: 10707:10726 ioctl 540f 200000c0 returned -22 17:06:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000080)={0x3, 0xff, 0x7ff}) [ 1373.195455] binder: 10713:10718 ioctl 5411 200000c0 returned -22 17:06:33 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) r2 = syz_open_pts(0xffffffffffffffff, 0x80000) ioctl$TIOCLINUX2(r2, 0x541c, &(0x7f0000000200)={0x2, 0x8, 0x7fffffff, 0x1, 0x8001, 0x3}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000000001"], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000240)="5c1483f240cca161816fc42d3b3789bab3d0291f1782ac3925720e683bece758444f56bcc5b377d18acfb3ea6069135850df28bf4fd2c4dbfaa7f0306a928b2e2695dcb7193c6752cc4baf328bfe77ebbf835b1e15d95ed1ef3118badd4425bcb369d1ae8407a2c6492f1ee88b90b19599109a4c1c53f421d48bb8a533bea22a076415cf3069d38914b574575dd396ef07e1f4b7549f4b6251d73a31552f32c7ca695580ce6eed18ed3c9e36", 0xac}], 0x1) r3 = accept(0xffffffffffffffff, &(0x7f0000000180)=@rc, &(0x7f0000000100)=0x80) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) r4 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x100, 0x4) 17:06:33 executing program 5: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$KDSKBLED(r0, 0x4b65, 0xfff) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:33 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) setsockopt$inet_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000000c0)={0x1ff}, 0x4) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x4) write(r1, &(0x7f0000000100)="09978ac60653d8e567d1a0e751ab93b8df0b86ddc796f3cebadc1cff90912fc2d05b921a2c4bbe423dfd5a1feeae3e9ecf893b39ee821ec10d31686de55ae66abff1f1106296e20fd2996d3a8fa0a5709eecaf5b541f6369cb81cf685beb0cb0382315ec7c776c", 0x67) keyctl$get_security(0x11, r0, 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x3, 0x9, 0x6, 0x2}) [ 1373.196919] binder: 10713:10718 ioctl c0306201 20008fd0 returned -14 [ 1373.243690] binder: 10713:10750 ioctl 40086200 200002c0 returned -22 [ 1373.243817] binder: 10713:10750 ioctl 400445a0 20000280 returned -22 [ 1373.264713] binder: 10713:10750 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 0000000000000000 != 000000000e000000 [ 1373.325031] binder: 10707:10709 ioctl 540f 200000c0 returned -22 [ 1373.375559] binder: 10771:10773 Acquire 1 refcount change on invalid ref 16777216 ret -22 [ 1373.393018] binder: 10771:10773 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1373.401938] binder: 10771:10775 Acquire 1 refcount change on invalid ref 16777216 ret -22 [ 1373.411189] binder: 10771:10775 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:34 executing program 3: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x100) ioctl$KDSKBLED(r0, 0x4b65, 0xfff) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:36 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() socket$netlink(0x10, 0x3, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS(r1, 0x4c02, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc62, 0x9, 0x16, 0x4, "9881000ab51b61cca49feac487528e420db47d903ed7af9c81f219d6634725a34c1108b928c8c7a7417a3f9f0804bea8b0a972d249043bb3654571646b5f247b", "33d00bb109255a83ac9432b6ea8916645781f7da3ee16d760ffe73cbc4176518", [0xfffffffffffff800, 0x9e6c]}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400add427323b470c458c560a", 0x11}], 0x1) close(r5) socket$netlink(0x10, 0x3, 0x4) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r3, 0x0, r5, 0x0, 0x20000000010005, 0x0) write$P9_RUNLINKAT(r4, &(0x7f0000000000)={0x7}, 0x7) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r6 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r6, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:36 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = socket$inet6(0xa, 0x2, 0xcf3d) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000300)={{}, {{@in6=@mcast2}, 0x0, @in=@initdev}}, &(0x7f0000000400)=0xe8) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="97a972bb3670ba8298af65186bc50285", 0x10) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x19) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000ffb000/0x2000)=nil, 0x2000}, &(0x7f00000000c0)=0x10) 17:06:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) ioctl$UI_SET_RELBIT(r2, 0x40045566, 0x1) close(r0) 17:06:36 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0xceed) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) fchmod(r0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6289445f"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x80000, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x1, &(0x7f0000000180), 0x4) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x0, 0x0) 17:06:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x3) r1 = accept(0xffffffffffffffff, &(0x7f0000000040)=@rc, &(0x7f00000000c0)=0x80) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:36 executing program 3: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) recvmmsg(r1, &(0x7f0000002a40)=[{{&(0x7f0000000000)=@ipx, 0x80, &(0x7f0000001340)=[{&(0x7f0000000140)=""/4096, 0x1000}, {&(0x7f0000000080)=""/124, 0x7c}, {&(0x7f0000001200)=""/230, 0xe6}, {&(0x7f0000001140)=""/81, 0x51}, {&(0x7f0000001300)=""/63, 0x3f}], 0x5}, 0x10000}, {{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000013c0)=""/238, 0xee}, {&(0x7f00000014c0)=""/142, 0x8e}, {&(0x7f0000001580)=""/106, 0x6a}, {&(0x7f0000001600)=""/222, 0xde}, {&(0x7f0000001700)=""/112, 0x70}], 0x5}, 0x3}, {{&(0x7f0000001800)=@tipc=@name, 0x80, &(0x7f0000001bc0)=[{&(0x7f0000001880)=""/37, 0x25}, {&(0x7f00000018c0)=""/87, 0x57}, {&(0x7f0000001940)=""/106, 0x6a}, {&(0x7f00000019c0)=""/210, 0xd2}, {&(0x7f0000001ac0)=""/24, 0x18}, {&(0x7f0000001b00)=""/107, 0x6b}, {&(0x7f0000001b80)=""/51, 0x33}], 0x7, &(0x7f0000001c40)=""/206, 0xce}, 0x67}, {{&(0x7f0000001d40)=@can, 0x80, &(0x7f0000002240)=[{&(0x7f0000001dc0)=""/238, 0xee}, {&(0x7f0000001ec0)=""/105, 0x69}, {&(0x7f0000001f40)=""/168, 0xa8}, {&(0x7f0000002000)=""/21, 0x15}, {&(0x7f0000002040)=""/251, 0xfb}, {&(0x7f0000002140)=""/203, 0xcb}], 0x6, &(0x7f00000022c0)=""/197, 0xc5}, 0x3}, {{&(0x7f00000023c0)=@alg, 0x80, &(0x7f0000002640)=[{&(0x7f0000002440)=""/235, 0xeb}, {&(0x7f0000002540)=""/49, 0x31}, {&(0x7f0000002580)=""/79, 0x4f}, {&(0x7f0000002600)=""/49, 0x31}], 0x4, &(0x7f0000002680)=""/171, 0xab}, 0x7fff}, {{&(0x7f0000002740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f00000027c0), 0x0, &(0x7f0000002800)=""/71, 0x47}, 0x800}, {{0x0, 0x0, &(0x7f00000029c0)=[{&(0x7f0000002880)=""/123, 0x7b}, {&(0x7f0000002900)=""/185, 0xb9}], 0x2, &(0x7f0000002a00)=""/62, 0x3e}}], 0x7, 0x2003, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000002c00)={0x706, {{0x2, 0x4e23, @remote}}}, 0x88) 17:06:36 executing program 3: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x4040, 0x0) ioctl$RTC_PLL_SET(r0, 0x40207012, &(0x7f0000000080)={0xfffffffffffffff7, 0x4, 0x2, 0x71, 0x1000, 0x10000000}) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x29) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400000) 17:06:36 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$set_timeout(0xf, r0, 0x1) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:36 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0', [{0x20, '\x00\x00\x00\x80\x00\x00\x80\x00'}, {0x20, 'bdevuser'}, {0x20, 'posix_acl_accesseth0-}'}, {0x20, '/dev/ashmem\x00'}], 0xa, "79d7387a7432edb949ef1857bf9ca0ab14ab3e4cb5af87706fdbf8577643f658c58971fd7b440b263540a0428d934aa7023781a779e318de30e36214c412a52c96c33a5c43c17bd56c6827"}, 0x8c) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1376.185117] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.213054] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.245555] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.260287] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.275025] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.279877] binder: 10823:10824 unknown command 1598327138 [ 1376.279886] binder: 10823:10824 ioctl c0306201 2000dfd0 returned -22 [ 1376.280101] binder: undelivered death notification, 0000000000000000 [ 1376.307631] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.320709] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.333141] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.345597] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 [ 1376.358921] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pig=10791 comm=syz-executor.4 17:06:37 executing program 4: clone(0x842102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:37 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x2000, 0x0) write$P9_RREAD(r2, &(0x7f0000000040)={0x1c, 0x75, 0x2, {0x11, "6c24828639ab2e684048863cb7f6a7c740"}}, 0x1c) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000140)='\xfe\xb9x\x95\x98_\xb9\xf6\xd8\xea\x7f\xf8@\\\xe2\xba:\xe5\x81\"\x8eBXu\xd3\xd0a\x0f\xa9\x9b\x91\xca /\xa5\xbc}\xede~6\xf0\x1fj0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000340)={{0xa, 0x4e21, 0x4f, @mcast1}, {0xa, 0x4e22, 0x2ba, @remote, 0x7ff}, 0x0, [0x1, 0x87, 0x4, 0x101, 0x9, 0x3db, 0x1f, 0x20]}, 0x5c) ioctl$TIOCSIG(r1, 0x40045436, 0x22) read(r0, &(0x7f0000000200)=""/250, 0xfa) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net\x00', 0x200002, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000580)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xf81U\ro}\xe6l\xf67\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5`\x8a\xaf\xf0\x1eyR4\f\xd6\xfd\x00\x00\x00\x00', 0x275a, 0x0) sendto$unix(r2, &(0x7f0000000340), 0x0, 0x4010, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000040)=ANY=[], 0x7c774aac) r5 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000a00000/0x600000)=nil, 0x600000, 0x800003, 0x8012, r4, 0x0) fsetxattr$security_ima(r2, &(0x7f0000000040)='security.ima\x00', 0x0, 0x0, 0x1) fcntl$addseals(r5, 0x409, 0x4) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000000)) openat$uhid(0xffffffffffffff9c, &(0x7f0000000480)='/dev/uhid\x00', 0x802, 0x0) sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x24008044) fcntl$getown(r5, 0x9) accept4(r4, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f0000000140)=0x80, 0x800) syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) write$P9_RLERROR(r4, 0x0, 0xaf) ioctl$TIOCMBIS(r2, 0x5416, &(0x7f0000000080)=0x7) ioctl$TIOCSIG(r2, 0x40045436, 0x2e) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$RTC_WIE_OFF(r6, 0x7010) 17:06:37 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000040)={r0, 0x57, 0x92}, 0x0, &(0x7f0000000080)="6f9a9f3c4e514ad1a2a23b9380d3419b96c1c4edc7b2e9c7e4638bc67ea5e3a06491c45de81d2b548f192f74cd1de48a9ccde3ad9cfdae06d17780a448ddbbc877bdc6a45ff8774e785bd4601ee4e536313c599561493d", &(0x7f0000000100)=""/146) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:37 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x100, 0x0) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_CONNECT(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x11000400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x4c, r3, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xffffffffffffffff}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x2}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 17:06:37 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = dup3(r0, r0, 0x80000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r1, 0x80605414, &(0x7f0000000400)=""/91) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/net/pfkey\x00', 0x204001, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r3, 0x40286608, &(0x7f0000000380)={0x3, 0x4, 0x1000, 0x5, 0x8, 0xfffffffffffffff7}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$UI_BEGIN_FF_UPLOAD(r1, 0xc06855c8, &(0x7f0000000480)={0x10, 0x31f, {0x51, 0x401, 0xfb0b, {0x8, 0xfffffffffffffff9}, {0x1000}, @rumble={0x5, 0x7}}, {0x51, 0x6e0f635e, 0xfffffffffffffffb, {0x4, 0x6}, {0x100000000, 0xd7c3}, @cond=[{0x7ff, 0x8, 0x10001, 0x2, 0x100, 0x8}, {0xffff, 0x100000001, 0x7, 0x10000, 0x3, 0x1}]}}) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r2) recvmsg(r0, &(0x7f00000002c0)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/192, 0xc0}, {&(0x7f0000000080)=""/19, 0x13}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000200)=""/158, 0x9e}], 0x4}, 0x100) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000300)={'filter\x00', 0x4}, 0x68) 17:06:37 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() sched_getaffinity(r0, 0x8, &(0x7f00000001c0)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={'syz', 0x2}, &(0x7f0000000100)='\x00', 0xfffffffffffffffb) r3 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r4 = openat(r3, &(0x7f0000000140)='./file0\x00', 0x402, 0x40) fchmodat(r4, &(0x7f0000000180)='./file0\x00', 0x1) add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) tkill(r0, 0x34) [ 1377.003404] binder: 10844:10846 unknown command -2147483648 [ 1377.021189] binder: 10844:10846 ioctl c0306201 20012000 returned -22 17:06:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) sendfile(r0, r0, 0x0, 0xceed) r1 = syz_open_dev$binder(0x0, 0x0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) fchmod(r0, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="6289445f"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) vmsplice(r1, &(0x7f0000000180)=[{&(0x7f0000000040)="38d887ab334095eae7e2e5943320d9edba0f8365db0ea8722dd612684ff11385b74f8428903a5f32568055451b4a84144ac5d88de1a70b62941b527f61adbf046c7f32c24ab73488740c254f660b1a7ea21922517e836a7f54150e4ea21afb01e5c6c36c1b66bddc57281a51344dc49b69072bdc34507b11d8b9bc41d4a463de6b913b2109a32d295c5b50d5bdea69592235c510bc53c5110c67b8d280386a35dce2d0cdfb5032cddbc01778af384e38947d4c3aaa0e749df60e7340b3dbd5855841a7f4202dbd423ef1541f459e31e555cf017e09af236150c11dea7148549e8454a02d98305b57c9b11855a4770172b6", 0xf1}, {&(0x7f0000000240)="5f244a19162e4d87a967bf5c4818e3fad67a5cfb630e8db3ab2507e41c4e4ea83b6caecac16f056cb3eeefdc84945b93b3ff53cc5ff9769f053fb9b9810fe40f1227a73acd920297c3faa3b596c76a37d4568fff60c43d5860eb315a5a224d7a1a818a5427e334b42b070e72ed3db95ea0d0ce3c21f750a1cf765c9797a78bb033cd4f85c0bbb3e1d0da316500facc89c5527cd0a0f2e9310ff289ed7a3974e9be075233fad4dcf51e9aa631d1e0fb696fb5ca138a683b18f1651ea166193b652e448d2e9b6eb2273ff08266b53313cd2c81ad3fd819210b7229d9826693e08b315779b6fc319e6def30", 0xea}, {&(0x7f0000000140)="c11bb6576b6036fac0d8", 0xa}], 0x3, 0xd) keyctl$get_security(0x11, r0, 0x0, 0xffc5) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) ioctl$TIOCGSOFTCAR(r2, 0x5419, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x94) 17:06:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000900)={@remote, 0x0}, &(0x7f0000000940)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000037c0)={'team0\x00', 0x0}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000038c0)={0x0, @rand_addr, @empty}, &(0x7f0000003900)=0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000005040)={'veth0_to_bridge\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000005080)={@multicast1, @multicast2, 0x0}, &(0x7f00000050c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000051c0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000006cc0)={'ip6erspan0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f0000007240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000007280)=0x14) accept(0xffffffffffffffff, &(0x7f0000009e80)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000009f00)=0x80) sendmmsg$inet(r0, &(0x7f000000a040)=[{{&(0x7f00000002c0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000300)}, {&(0x7f0000000340)="de640a98714924f01415f9c44e1ca1f91bdc63a8493e26dcc77973123bc54c", 0x1f}], 0x2, &(0x7f0000000980)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @local, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x665a}}, @ip_retopts={{0x68, 0x0, 0x7, {[@rr={0x7, 0x1b, 0x7ff, [@multicast2, @rand_addr=0x10000, @broadcast, @multicast2, @rand_addr=0x400, @multicast1]}, @end, @end, @noop, @timestamp={0x44, 0x10, 0x3, 0x1, 0x2, [{[], 0x5}, {[], 0x9}, {}]}, @ssrr={0x89, 0x27, 0xc51, [@rand_addr=0x48, @local, @rand_addr=0xffff, @local, @rand_addr=0x7fffffff, @loopback, @broadcast, @local, @empty]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xc39}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x130}}, {{&(0x7f0000000ac0)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000b00)="22975ddbc1a9ce704f8f9b3b381b7636790cbcfa514fad187c7f7be0632038a2127da69c5b401be9d5384bd844a2a10abd514700e1966343c7e2a68ca41d44a8c35c2b12f066fe9a0fddd64d4458d3d7c4494ce04041c4ca4ba5f59336e850c47decb0c6dac02eaf14af914440a1091b09f74e8d9eb6789dfe41dfae3716d167c841092d8cd0313be7d961b822b5a3b3c463e7ff8a88c7f93c83bdc7", 0x9c}, {&(0x7f0000000bc0)="6a15436966d9dd77f3700a0227ef52b13eaa562c4f2c211d50c8255d03424cfdebfac1e3129f8783ad0dce05c05cc35b5355ba513a523c4163ceb94e761af1daedddc554b830f8ac660043afa4fbf1d0d63f42b6171fb5ea50", 0x59}, {&(0x7f0000002200)="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", 0x1000}, {&(0x7f0000000c40)="b7c82429543ed4695cd86edfa1aeec6298a65b", 0x13}, {&(0x7f0000000c80)="466bb98406041b300fbf6451e1edddac0c303cee846d256764cca2a83ffa55554a9c7d0e07a1bc548ad0184c0f02e65b4df1388fb12988bfff1cb8645223593fc87c7cbe73e082c61269c9b832f62274940fb545d85da5349522774105eeacbe135b6e51c09937eeb515ec794221107c0c8eba6dad7893d42b16c3212d0efb2ea78d1938e65e9652523cab7e4290611edca3ed45a5c72e7f164a85010d95a3e4ab41a9e99c56dd8998b03037b75e573f883ba2e8d3eb45653fc1db54fabb155a419064f5f5b2445f7158b7ac8632c55818278d13637db2a5a7f51dc1f14918c1b56da0c7f4acce4895c75da9b6fc2550", 0xf0}, {&(0x7f0000000d80)="0f18ca21c7760d725bd114f2ae91b79f67dca5a1871a75a2c965f10d3df8c899ad50fe754283069af3632f6322512dc287357ac417dc6ea309ed1f9e804b04ca1e23d353910a14bd72753465667569c911335f5c8c0703c8e578a8ac66f28742824c7de6243e2e92db82d0ed37eeb08232da5c128ce7c64e96faf20d193926d9d9bddbe0f30040bf4a2fd605da4eecdc23bdd0a7c5ec16fd4a4e269b56599314b7f69cc41f4cd40c5daa589ce89f1f71ed133e11971462a43fa60d12090235e673df9f83d7bd55c13c82debc9fa0d7658283b2448bfd41a3d690f26f334a21bf86ebf0b9d1", 0xe5}, {&(0x7f0000000e80)="5b6e76998cac4be63fbb08695ced781db441fb20d136c0ddb5f3df5d7e4eba9f542c5d7e4bee667d4c63ff91b8630c25cd0936298216cbc57fa0acd760848e75322a8352575b70f017519c7ad8a8d537f4d2c52d8ad192", 0x57}, {&(0x7f0000000f00)="8dd36ac7a43030a243850c6de96bbe3d3fab71a5c2dce19cca7239d0d24137f1d50e49eea0aa24109b99f2d2ac0c498768aef6e4a28073c8607cfa672a9e07a0ffc477598a6e8e90504757b6b734e17a79306bc4198dcf4d163152cb877c8e4d468fa6e2a57a506da76664d2d65287987863d689168c3e54", 0x78}, {&(0x7f0000000f80)="f85564494bb973a7ba8ca3a92d52cb26657086a60c178e38edaacf045e925ac92d5a4413fa17866fa1c163d1e48b2016", 0x30}], 0x9, &(0x7f0000001080)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x86}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}], 0x30}}, {{&(0x7f00000010c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f00000035c0)=[{&(0x7f0000001100)="839c0786904e5138a965d1793f6020891f906b137bc0ba32e40b48b93b3bfb64f0dc6b7fe9835495044222cdc597283eea86e2f8715a62b646d56831254ee62cc794123a52f883885f06227e171daef68f7804f16f391edd925c28bf91690f151dd892ba6b5a5d47fcaa31fd7e96e3a32c83cd2829b2d3816417a0e6fc935cad2fd0935b80d658b4ce0b3b80828c0303b27ca6bc9599afedaad397a9aa8af3f9190d59eb15599f057f9da1041bf10f0e4103", 0xb2}, {&(0x7f0000003200)="873ea65e455b6e08229e9b3a6c054d3e4a4382ed0b8f79adf4ffda636ca8b50a7d02e4a1dc72869f0bb1f880e27aaad51c5042a8a190e0199f05f287b83394a087a4cb19819de24bb320375cefe201fa538a198fa9264bf1bb74356f233cdeec12d2037c3462121d15f012f852db8cd301acabecb5a2261097a972", 0x7b}, {&(0x7f0000003280)="b665293e5dfe60309aeb7ad8245ebcbda3d5264e4114c52423d1797a43ab138278b89f5c831a17692fa3e526e41f118fcfb6efd9cab4f3e1b734c4939368753402ab82abfac1d45307347369a9d1b6556096332a6054cede45162c35a0333c3e7cc73e1497603fb0fd5c6429cd76ec4c79fdcd8a85fbf3c13754ce9b8e920cdf05f85ee007b37581", 0x88}, {&(0x7f0000003340)="ba708b3c6ae57e82273e6ad59ee5dd97b3eee39223bd821fc4bdb259d0a8067c42150bb638303298ca487447bf1701ef79585fe5b451fd5db4c9a57f2aa66d58f3d2beb8b089f9ead35d3ec13c2985f4e0730383545387a05fa2a7c896d01bf519078f39519623ff0ce989ecd62475effa7c330f133fe678e62eeff9c2e582aa83790773ab2246f13128e67f07a415", 0x8f}, {&(0x7f0000003400)="042ad09d4d4f321fa90af4a315292cfedfb29912c709d806e8eb91a990c36e46748a250a907122bdd6fdac1df33028846fd3f41e85ff17af3ce3a2189e5db15330b3aec6bbf8ea7036bd000393fd58fd34457691754bc7739d83bdc71b0a5ab8457addbcb21baa1de124b253a164e4b96724c64a6055a5dcb2e57300db6833e7f35965949752048c550abc9b783a44e2be76eda393dad492c8edd952350980f491b272cdc9e186751b0cf169a2f4e89365b8d1caaa9c63346747844698", 0xbd}, {&(0x7f00000034c0)}, {&(0x7f0000003500)="2c10389031a3992f454c23901be008d0939dcb224dad364143c41bcf7d7438ef5b1426e3aec6fc72752f27e87b5faebae95c37bb8fd080d9dc84889c0b313b084ba9ebbd4aaa83625257354d20ade62bcaf1d769c2c8d056e55f8a5e9b211c918525990d543b4bfeafbf81d667985017f80c3c1c0f727823bcb59ca22600f88a5a47c45c16106d7e8d9277810f10ed5684ed0939fe365be0", 0x98}], 0x7, &(0x7f0000003940)=[@ip_retopts={{0x38, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x27, 0x9, [@remote, @loopback, @remote, @loopback, @local, @rand_addr=0xffff, @rand_addr=0x5, @loopback, @multicast1]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2752000000}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@noop, @ra={0x94, 0x6, 0x200}, @timestamp={0x44, 0x20, 0x9, 0x3, 0x5, [{[], 0xffe000000000}, {[], 0x80}, {[], 0x6}, {[@local], 0x5}, {[@empty], 0x24000000000}]}, @lsrr={0x83, 0x17, 0x5, [@broadcast, @remote, @dev={0xac, 0x14, 0x14, 0x2a}, @remote, @dev={0xac, 0x14, 0x14, 0x21}]}, @generic={0x83, 0xd, "d5a67edf48c00630da33ac"}, @rr={0x7, 0x27, 0x8, [@loopback, @empty, @multicast2, @local, @empty, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @multicast1]}, @ssrr={0x89, 0x1b, 0xfffffffffffffffd, [@empty, @multicast1, @multicast2, @dev={0xac, 0x14, 0x14, 0xd}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @loopback, @remote}}}, @ip_retopts={{0x34, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x9ff9, [@multicast1, @local, @empty, @empty]}, @generic={0x86, 0x11, "4c79ed4296171193a35634863ae08b"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @broadcast, @local}}}], 0x168}}, {{0x0, 0x0, &(0x7f0000004f80)=[{&(0x7f0000003ac0)="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", 0x1000}, {&(0x7f0000004ac0)="5eede09d417edcc783057bca56028f435a41eb80230145048e6925d4cf33caab0f286fb0a79ea6228b2a82b227b73092421db86072fd2430cda01e30941cb12b8c909afdb968b84ac671a0a7c80e7fc588a4a90ad21babd597d4a2fda5b6e0ae395bed40914dce5d9f1c7ca60b312c6a392509089afa72fc8616e1311246a37168e11d6dcb5cf40ccdde7dbb3bc06d4721454afb99b8378932e7debbb40f19feb6692f4552d7341b2eb5e1024c13b027f6c52a5b4df7ec69c74f2c9883bd58473eefcfbf679d8a34", 0xc8}, {&(0x7f0000004bc0)="8e3bd0b435f9c2c8191b7cf0e3063c5e2a0f92c4d2b2ddf75f8ed5b64a30ca8dcb0a4ec6b494da08dadc57e6", 0x2c}, {&(0x7f0000004c00)="f9ab04155d4ac8ce6e024478c8e2f6a58fda66c648fb81f1c52adccb52393045243958365f16e170e895602a5d7eb101f9c510e54b6ebfe9cdb427a1f8bbbdd5453d4071f5ca3c72fd14922d82a04ee2b6cc44642dad3915ee773cac8da30305", 0x60}, {&(0x7f0000004c80)="d42f0edfe548455c20b0b40295771c5a19216cc96af343c7b603a210d77281e1034982a1463c03c05e8eb82a78d7e810e8c32b183163437e710707d79ba11b40776288d177dc2ee0bc6c5c27b628eee0aee9ff62068cbc329459323f8dc22568aab66b08a500d6156aab75d4062225", 0x6f}, {&(0x7f0000004d00)="d59ea95d41606154ba581a717a2fe66217671184be88d6092f221483340c328a19c8fb26d44d0c6cec558b3a0799ed38a697b259054eb0eaeae6386a8f5782bb21c6749b9dd8c8de3545a6d9144025c2a3b20fe428be0208e3d46bad22d38d807a276ddbf8f2f9120272f32ebf33e0", 0x6f}, {&(0x7f0000004d80)="4b028a30f46e8656744ed6e15fd9d2c6ff76706fc67c8dc2e72360d5d72c8c9b19b230f6197411a97fcfc5fdff18894fcb656c47a2243f1e2869464f25c43094391a9be16ed98fcd928a993811968ca059a7af01e48f5c5849a86c04c11350bcb32f1dab36bbcd7877436a29bf3deb2c7b82af498b920431cab4cea5c05d235b50471d0a01f2f94ebc33ce579515f09111ae9ad08867318cb538356c2937d7b6bb17289e546d2298d5d6ac3a9c2e835db10c1d77bf5f3b1701d0384326304182f74179ac82279ba2378e861b49142e6bc10da6fd3b1ab13a12d1ee4cb0c9f9109634033a62fc0323723415e5f45bbc667a28ffa4aee6", 0xf6}, {&(0x7f0000004e80)="96bcb4986032571ecc69cea84442cd00be380efa94cfe4fe26dee117be91e7502053ec3eaaa1a13402bbe938a9733351c18a27", 0x33}, {&(0x7f0000004ec0)="7d60448efc4953a556cdb828fc5d15fafa3761c696a421d54017ed7a2c9b93841962ee423dda29966512d0ca0b2ddcd2fe9e6e3add8485dd3e0e15edd1326f4c65ab2b6bca39dabed2e872b23e58ce1cd075c0dfcffa409499a8e60ee7c62d268d4f930ed40da302d0c03d14d1a118b736cd156ef95f4092a9649d491d2f5550091afe9599a55c45bd39f016249d24fffb39e0ecdae41c87f23fefb0e62c2693470fb4740e06b46729655cf730d1", 0xae}], 0x9, &(0x7f0000005200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @multicast2, @local}}}, @ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x1, [@rand_addr=0x8]}]}}}, @ip_retopts={{0xbc, 0x0, 0x7, {[@noop, @ssrr={0x89, 0x1b, 0x2193, [@broadcast, @loopback, @rand_addr, @rand_addr=0x6, @multicast1, @multicast1]}, @lsrr={0x83, 0x1f, 0x10000, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, @broadcast, @multicast1, @multicast2, @loopback]}, @cipso={0x86, 0x64, 0x1ff, [{0x6, 0x7, "c285bd6188"}, {0x7, 0x2}, {0x7, 0x9, "53c0a9a793c96f"}, {0x7, 0x12, "37ab60800bb4e9b22ae400a2d2750ede"}, {0x5, 0x7, "6febc5febe"}, {0x0, 0xd, "3e4b833da2ae70b157e21d"}, {0x1, 0x2}, {0x6, 0xb, "33acf7c160a7ea757c"}, {0x5, 0xf, "7526672db911de7c175388bb99"}, {0x0, 0xa, "7f11033837aacc54"}]}, @cipso={0x86, 0xa, 0x7f, [{0x7, 0x4, "e84d"}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast1, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @multicast1, @multicast2}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xffffffff}}], 0x180}}, {{&(0x7f0000005380)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000005480)=[{&(0x7f00000053c0)="a13a740dee8ee301b0aa7e3cb69b3f2c289fa170064b400c3d80cb91614d224bf50b", 0x22}, {&(0x7f0000005400)}, {&(0x7f0000005440)="b077144d5aa7c1a42416af2f5b333efffc04eb759388a8e51cef378988f6fbcf36f53c47d02b07d5f1d486a1d6", 0x2d}], 0x3, &(0x7f00000054c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xd2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@lsrr={0x83, 0x23, 0x74, [@loopback, @loopback, @empty, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0xff, @local, @local]}, @generic={0xcf, 0xb, "185a9bd966faa7f040"}, @ssrr={0x89, 0x7, 0x0, [@multicast1]}, @cipso={0x86, 0xe, 0x3, [{0x1, 0x4, "c53b"}, {0x1, 0x4, "b5f5"}]}, @timestamp={0x44, 0x28, 0x100000000, 0x1, 0x6, [{[@remote]}, {[@initdev={0xac, 0x1e, 0x0, 0x0}], 0x10001}, {[], 0xffffffff}, {[], 0xffff}, {[], 0x3}, {}, {[], 0x400}]}]}}}], 0xb0}}, {{&(0x7f0000005580)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000006c00)=[{&(0x7f00000055c0)="86b2f4a961983799eef3f4e8ad0744dedee0a59b5ad5e9274eb11d9301ce74133a9637db8e7f37f1c14aafe3d63fddad4e4db43a929eb97c9be0ce2bbd1cb8c68c6c8a9b38990799b0a3dd7d51459cdfa8afb4bf8598e65200879d80cb1e6a9ef3ac37dc98fff5a641828027a503b8b1859dbc21543693e94d", 0x79}, {&(0x7f0000005640)="7750002d116e20d3b0264eb66c18504ba3a50ca2665e18b4ae212b5d17dc059f9284e4fd985129402f2b51e76b9f643a54c1668fa743deac5e16bd85e56ee9a1525fcb84bbec1aad6989982a1ed7986d835e0fd6905c44898385e5d771e346e253e840d58dcb1d858d1bd5709336e1c64d75a4438a7f3f4f7fd90e83428e1506267095", 0x83}, {&(0x7f0000005700)="5906a453285dd0e2e005b69d87cb80ee5d6d849e3d282b9275e07be92aff7554c9784e0f01de6976b1465e6a424e1beb066dc6828a2bcd6c12ce620a5f4da5ede95212c96f150abe8108a0ca0a47aa8d1c341a7450a2d9dccb7c1ec14ce81fb4ed348a17fa33744c7da827f41f4f00215daef1e55a9d67e5a697d6d55eecf0849ac10ccaca1b9133e7c8ba00d8f728e0a416", 0x92}, {&(0x7f00000057c0)="7abe420925d2457ce1d25e75c280f3bcb14aade69e4cceef8ea36fbc0124d17c47b1166d2a8b3016b08c1ff08176d98d67030040afd26383196de33bc0f16c0cfe50857a9ba7afb58fefebf71ef07d2dd61713b7c06038a56f7a8eafc498d2d8042476a88644a63be0a042a4f75001cf463838eab37003400cf3705f720a74178acfd5378503aeb0ccbc81b54a77083f7e63dc664c1c183e4b50a56f1091beff1de9cf3bd670240c9715fe81922aa2b784d0904301812a4e3331ab92395612669d69c9b2d861e84390f99f377dcd510e3f96cec5798463a02ac8c550470a733e48e592df7e769b0759e537fdeb2e29d61ce717c97dd7b4", 0xf7}, {&(0x7f00000058c0)="a4bf2c5fc64766fb5f5ea5e572c76463b37cddaf1791a71e9bbf5a6a6e242591871dfa5a6746bd39e72eb2bdb66de33bdb4c54011978bec9323d", 0x3a}, {&(0x7f0000005900)="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", 0x1000}, {&(0x7f0000006900)="8a961c8c3c43e7822f87097808a232ca87c8d18457279b38e6e3e7622ed8a4ac3d7297a408a3e66275e736e7af04d48c4914446da11b7e31531e9d6544cedcd36c1fb142346c3bb25b4edab21997a9d44b487fe3d959bee7d26a3cd49e2ff0875f8964e2df60cb263f21b42a8a4a229cba9a7e4852bf73b0f972ad5ba2b68965f3c097f5872e3e607899bf99771720126be3d8835b52f537eacd4b87f2950eba1698d6e4473d5dffa9abb3b4ff65f3cc2c3870112c70ef46a3ce62a585c782465b97344382e3f908f5acb2f6b05dd0815be6e1bcc1bdd918587a9be6879df96ba2af4c7d", 0xe4}, {&(0x7f0000006a00)="1e81b6226536e69d1ab3c62ae8099e0aad8b709a7168ddeb52d8a850432e66c2f982862b3890e0604f1efcb43d79db170a93c55fd8dae89b49b28a08ecfb700cb47ec86e441ab4234f20e0723df24c486365ca89ec38a2ece1136e77465e321f99446e01e7bb15be578677896375741853f40c53973e1113d169415aa7f21ada1c375448d40b8e4b82a9c8716e1e58921a045a474f1acdabdf5adf18f6cc8b980c4f987b02c659e1e420c903a21c861b", 0xb0}, {&(0x7f0000006ac0)="12401302763f68cfc76a1507936b504c49d0bdc82c393df306e9db77439db85b60b59ca76a0f4039d4137e29d95429bcd7eaca85adad937406340f29a5667369e9010636c41dad52cd04eb4e17927e5be9e6eef6ba3d2e2201d0cea8ed996e219a8d9b229d9b97fdcc919e36fd2c7040e7e759551588329313ad5e524215791dc2e8ee54c082299a1dc338895471dad864d29e6fef07a1ba8bcbc56c235b89186749f260aa737c2d87eb027b872d1beb9be68e7f", 0xb4}, {&(0x7f0000006b80)="354148a8cf423a5aeb048cc875fa49eea304c5a75cf648dafd855c3a71db9a9a3bc5b1ce8e53c0ff1fb677acaf3b88f4416d7a1104bb07013b41f753ef5af5f49e4db9114bbdeb2aedfdbfd0a22c4d04d10b380e573977861c672cd8bd", 0x5d}], 0xa, &(0x7f0000006d00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xab}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7ff}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @empty, @multicast2}}}], 0x98}}, {{&(0x7f0000006dc0)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000007000)=[{&(0x7f0000006e00)="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", 0xff}, {&(0x7f0000006f00)="ded381380a6a72cd87147e86cbd2127316648f66b1ffc8f0eb30ea4cd74da99aa1a4a836eec4ddeee3c052ca60f2a5d772415e9e2e03a81b8e22dae2a65ed2bdb0f15d892fe5269ae7bf36becea2ab2e1aa90bdb826e350e422d98a42108d55cade32ad509b3b8bf06c3710ff9c6ac3919bfcd2b115b0739b4c7873a9953849db659d9020327385bd6c2f18042e2846e12e82dabedb362661907f6314162730d74ce33dd5c49b16eec2d4636cbeaf1b85631d5437c8af05180da4d87830c6e71b6f855bb2da3a5b48d7a2d6b3fed5fb89d2dced8e856c952dd", 0xd9}], 0x2}}, {{&(0x7f0000007040)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000007200)=[{&(0x7f0000007080)="5fef4670950fdbb3d4243bc1af22f9fb", 0x10}, {&(0x7f00000070c0)="1ffe0f8f14a1933c517ac69a715629166802aa81ffcf3cdc76aadcde4df60de83a3f4cd43c52ee99b26ab4bf1f5023646e929a4ff434f9909ac4388b5ed588cc7890d732858347ed85cfee80fcada97d764d5d03dcfef75a50b3fd344955be01a50d4740f23bdc08435e6623b39a04ebecb1d8aa94fbac0dbb01cd336a07541b9d462ca9ad96ff196a003a434328356b39f14d91f549226afeceec2e1d2a426ff6f7b5d0be4913f80941e72ba9a31db6205f7d0da9c5944a81ccf263b9eb4877688ee8e6ac337d23a081db8e036024396972352fcae9dfdb1b1563f843f2", 0xde}, {&(0x7f00000071c0)="f325c6f2e71d8a3647f49c452c7ebf0068", 0x11}], 0x3, &(0x7f00000072c0)=[@ip_retopts={{0x30, 0x0, 0x7, {[@rr={0x7, 0xb, 0xdc5, [@loopback, @local]}, @ssrr={0x89, 0x13, 0x0, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x27}, @multicast1]}, @end]}}}, @ip_retopts={{0x7c, 0x0, 0x7, {[@end, @cipso={0x86, 0x33, 0x0, [{0x7, 0x9, "94c912f7560389"}, {0x7, 0x9, "38637c56d02858"}, {0x0, 0x8, "c79a09e67fef"}, {0x7, 0x7, "b38f88184a"}, {0x1, 0xc, "d483597f2617ec575420"}]}, @generic={0x88, 0xf, "c87cbb1428d075bb72d6a7a43b"}, @generic={0x88, 0x2}, @rr={0x7, 0x7, 0x100000000, [@dev={0xac, 0x14, 0x14, 0x24}]}, @cipso={0x86, 0xd, 0xbe, [{0x0, 0x7, "ea860829e9"}]}, @generic={0x89, 0x3, "e5"}, @generic={0x0, 0xd, "10a1c0ab41b749074b6e80"}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @remote, @local}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x6}}], 0xe8}}, {{&(0x7f00000073c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f0000008540)=[{&(0x7f0000007400)="9cb3a9d720cb0e32cd101836f2d7557885d4b03424dc5371e09a80f1504eeacd868ff1cc7536afa22cf15e3a90b9fd6f42cdd91600749622569a2edc3afbc303e42826bfbc92ed0b8d25a9b3ae779462be61100d884ea51162095e1cefd5f9730ea5821f8af697bf8df82065868b36b19f8d7cd7d675bdbaa42a49dec388fff910dfd38e98a75e25645fd883696ef4b0a83c7fee01d520ae77c3df1404b51572c8fc6210c190ae29953ded0eaeefaea292ee564020dc4ab5da145a4e342921f48697728aca410c0e", 0xc8}, {&(0x7f0000007500)="7723791fc2d068fd5686ecbfa8137f7efc021ad678abed71fce45193fc874afb", 0x20}, {&(0x7f0000007540)="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", 0x1000}], 0x3, &(0x7f0000008580)=[@ip_retopts={{0x10c, 0x0, 0x7, {[@rr={0x7, 0x23, 0x2, [@rand_addr=0x89, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @empty, @dev={0xac, 0x14, 0x14, 0x1f}, @loopback, @remote]}, @ssrr={0x89, 0x7, 0xffff, [@broadcast]}, @lsrr={0x83, 0x27, 0x71917816, [@loopback, @broadcast, @dev={0xac, 0x14, 0x14, 0xe}, @local, @empty, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @multicast1]}, @cipso={0x86, 0x39, 0x8, [{0x7, 0x9, "64fb269ebcab79"}, {0x7, 0x11, "5efe94ebbcb285137004602b711368"}, {0x2, 0xe, "cde187db58e3841325fd3896"}, {0x6, 0x7, "756d1c0fb3"}, {0x7, 0x4, "fd37"}]}, @timestamp={0x44, 0x18, 0x7, 0x0, 0x6, [{[@multicast2], 0x4}, {[@empty], 0x81}, {[], 0x536}]}, @noop, @lsrr={0x83, 0x2b, 0x40, [@remote, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x1f}, @rand_addr, @loopback, @broadcast, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @rr={0x7, 0x2b, 0x7f, [@loopback, @local, @local, @empty, @loopback, @rand_addr=0x1, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x5]}]}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@rr={0x7, 0x17, 0x100000000, [@rand_addr=0x6, @broadcast, @local, @rand_addr=0x8001, @local]}, @cipso={0x86, 0x12, 0x7fffffff, [{0x0, 0x5, "64fa06"}, {0x7, 0x7, "d020ce4b24"}]}, @ra={0x94, 0x6, 0x40}, @lsrr={0x83, 0x1b, 0xfffffffffffffff7, [@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x11}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x1a0}}, {{0x0, 0x0, &(0x7f0000009cc0)=[{&(0x7f0000008740)="97d799c444ec677a1e4001f37e30996d96920062b1eac65061cc7351c2b8a92225c5254f6750fe5ad7d4a3823b0d27e600ec341fd3fd5103d00c58a2f2ee44215c2af99804c4380c30c4838b7c4143aee4600e954838a4f5951e575dee5968f49fb5a18a928605ef3c5370a57988b8634ffb4169a8b45d5ab32b65b7b98828bdeed9d27272d9ba2633731ecb21ccd432249747eb9ab94238dbd80126944b9a28d1b6dc293d47b906343e77f9ba4c5d93324b60663128b58087e7e55b7dc0d9485c402e2ee4a10acebda472fbc3ec9d4e0cb865c28e00ab877a6faa95acf6b6a72391c4f6b607dc95e3c5ee9a64d8d038dc83df78", 0xf4}, {&(0x7f0000008840)="e3bf49105bac9d98f68ba9d44f716b4a356d5cb7639c4b3d6649bd9aaaf9ec17ffc1fb19f883251abcbefb8d27016e953f4f0c2bec49c8ad8256383a43ae65e5ea168959b6f3406d525713549509d75f7cce9eede07e4ad1c9348228322f519f5b4c78b2f9f99950f607b7f8d55b9effd8874bc9d2e505e62bf2d73d5c1335fd8fdebc3c490392105d0d3118ccc163d6", 0x90}, {&(0x7f0000008900)="5d11333c9519bcd7d2b31f690729ca2a4aa0d8803e02c130c62baeea76e17df51a5bee551913b299723483d89ba4343ee81446c836438104dc03a7e5455d35b0fc84387c469fd854f03a7eed430dfad2dbc19994681d6f90b2d0e6319489131dd42266b0bf55948d16e8c72f4f15fa11436fd35b8379d4b9d973fe09308172e3d50fa454b50fcb397f3849776357e629d512c73985c3376a", 0x98}, {&(0x7f00000089c0)="b445b63d8d9dd886c5fc0fade161e99337977ce6bd6197a7cb884cffdfe81bd3110a03a6c72b4f6b357155dcdd519c55b7fed6feb4ad5175403f69a1ce466c1e97ccbd9c4d6b312a9307e6880819aac021ee61a5fa9c8c8b8f280bf11727a5ac128fd463813e78562b78104a4151ecca1267a6f33d3b4fff785ef244b66fd778587637ed4db6c7e21b2f2262cfc60e6452df0b00d45309b4564ab9c8532404ba88c7d8f8a4e3619cfe2b853ec26d84b8043ff8889a67b60d61393578abc7631338147680189dfd8e6ec68db5b67c", 0xce}, {&(0x7f0000008ac0)="6a6f621544686e00d9900b71b6532f81368454710bfdbb30eeb5c5341f0b9bb48ab769583f52d07d", 0x28}, {&(0x7f0000008b00)="f96863da544521fb592598fe6588927c9c2c19e6793cc026e82349ce3c6d1fa171d818f16fcc7b41d458c570780364cfdf57a22364f4c94db723d7ec042cfcfeb02cc2089fec6c32b617499cb3a689", 0x4f}, {&(0x7f0000008b80)="405836968db9b545ee56444fc5e1162f1b1856603d6ed0e7e65538117f442c5bd50a91fca55ebc3831b8c47dd0249fd75bc4298e3544e01dba9ad14193746ce89e2918b3c2afa047af60321136d95ba421ad642b6656c9a7380f9a823c9006b0383ab817a69534eee7f4ad5c39b6578f2fe88eeb2491e5ab", 0x78}, {&(0x7f0000008c00)="7af50c4b5fe6cc1a62dea1cbb9757dcc7087bd7be22a370009e7657d7032be88148b2a7da5392ccb256bc23c8652c6f27370b9a138c7f0e111bf6765dc77cf171c76674033e6511e6140f3d61bbe2c6783f7222f6d124b7a0350defb0a89fa8e9101adb75aa0484184c68d85432b20f3f2d71ea95256ac54e567ad22c6c72ca213f7357ee976396cf7d29608c8df822276def3b22147f59eecd41b568dcbb45353fd", 0xa2}, {&(0x7f0000008cc0)="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", 0x1000}], 0x9, &(0x7f0000009f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x41b}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @empty, @broadcast}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}, @ip_retopts={{0x34, 0x0, 0x7, {[@noop, @timestamp={0x44, 0x14, 0x96a2, 0x3, 0x1, [{[@multicast1], 0x747}, {[], 0x1}, {[], 0x8569}]}, @generic={0xd4, 0xf, "a9cf24f1a4b53c0e3d1b344621"}]}}}], 0xe8}}], 0xa, 0x4) r10 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f0000703000/0x1000)=nil, 0x1000, 0x4, 0x50, r10, 0x0) ioctl$ASHMEM_SET_SIZE(r10, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r11, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) ioctl$ASHMEM_SET_NAME(r10, 0x40087708, &(0x7f0000000400)='keyringlo/lo%&$cpuset{[.\x00') close(r10) ioctl$FS_IOC_SETVERSION(r10, 0x40087602, &(0x7f00000000c0)=0x80000001) fstatfs(r10, &(0x7f0000000240)=""/109) r12 = open(&(0x7f0000000040)='./file0\x00', 0x11d001, 0x100) sendmsg$nl_route(r12, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x240000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="28000000200000002dbd7000fcdbdf24020010080200000000f100000800d05fe86acacb3d9ee34a762b3f1b0c0447cd07d2cae209a2d5b857000008000d"], 0x28}}, 0x10) pipe(&(0x7f0000000000)) 17:06:39 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x80, 0x0) r3 = getuid() r4 = getgid() mount$fuseblk(&(0x7f0000000000)='/dev/loop0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='fuseblk\x00', 0x8408, &(0x7f0000000140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r4}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@allow_other='allow_other'}, {@default_permissions='default_permissions'}], [{@fscontext={'fscontext', 0x3d, 'unconfined_u'}}, {@hash='hash'}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@permit_directio='permit_directio'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@dont_measure='dont_measure'}, {@defcontext={'defcontext', 0x3d, 'system_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}]}}) 17:06:39 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="05630440f8000000"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="ffffff7f0800004b30ab0fe6819f1ecc20ee0fbaa763b4ec56bf25bab61e887c20fa79f478589fd08e186987675100cd255294d710a218486095716558565d9d183f4cc19d34822708007f66185841ad2e96cc68e0c768ded1"], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x18000, 0x0) write$input_event(r2, &(0x7f00000003c0)={{}, 0x2, 0x1, 0x2}, 0x18) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000002c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4010200}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x24, r3, 0x8, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0x9}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000000c0)=[@decrefs], 0x4, 0x0, &(0x7f0000000100)="15275b49"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:39 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x448300, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:39 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x400000, 0x0) ioctl$BLKTRACESTOP(r1, 0x1275, 0x0) 17:06:39 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x800) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000140)) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x2000)=nil, 0x2000, 0x0, 0x4010, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/mls\x00', 0x0, 0x0) 17:06:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:39 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) eventfd2(0x0, 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f0000000080)=""/7) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f00000000c0)) vmsplice(r0, &(0x7f0000001cc0)=[{&(0x7f0000000cc0)="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", 0x1000}], 0x1, 0x4) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000580)=0x6) write(r2, &(0x7f00000001c0), 0xfffffef3) setsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f00000003c0)=0x5, 0x4) vmsplice(r1, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000002c0)={'filter\x00', 0x4}, 0x68) r3 = socket$inet6(0xa, 0x400000000001, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@local, @in=@empty}}, {{@in=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000240)=0xffffff20) ioctl$RTC_VL_READ(r2, 0x80047013, &(0x7f0000000400)) sendmmsg(r1, &(0x7f0000004180)=[{{&(0x7f0000003bc0)=@ax25, 0x80, 0x0}, 0x10001}], 0x1, 0x40000) fstat(0xffffffffffffffff, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0xffffffffffffff61) r4 = dup(r3) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f00000005c0)=0xff, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x243}}, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x12, &(0x7f0000000380)=0x83, 0x1fb) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20000008, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r6 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000980)=""/175) ftruncate(r6, 0x2007fff) [ 1379.245987] binder: 10887:10892 unknown command 1598327138 [ 1379.252229] binder: 10887:10892 ioctl c0306201 2000dfd0 returned -22 [ 1379.266393] binder: undelivered death notification, 0000000000000000 [ 1379.305822] binder: 10899:10911 Acquire 1 refcount change on invalid ref 248 ret -22 [ 1379.316091] binder: 10899:10911 unknown command 2147483647 [ 1379.323075] binder: 10899:10911 ioctl c0306201 20008fd0 returned -22 [ 1379.338872] binder: 10905:10909 unknown command 0 [ 1379.344642] binder: 10905:10909 ioctl c0306201 20012000 returned -22 17:06:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$void(r0, 0x0) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x1) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000040)=0x0) fcntl$setown(r1, 0x8, r2) [ 1379.362582] binder: 10905:10909 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1379.379374] binder: 10905:10909 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1379.400486] binder: 10905:10922 unknown command 0 [ 1379.410612] binder: 10905:10922 ioctl c0306201 20012000 returned -22 [ 1379.421586] binder: 10905:10922 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1379.440893] binder: 10899:10925 DecRefs 0 refcount change on invalid ref 0 ret -22 [ 1379.478161] binder: 10899:10925 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:40 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/relabel\x00', 0x2, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000040)={0x2, 0x0, 0x80000001, 0x1, r1}) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:40 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x7, 0x1, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001600)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f0000001700)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x104}, 0xc, &(0x7f00000016c0)={&(0x7f0000001640)={0x68, r3, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x200}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}, @TIPC_NLA_NODE={0x20, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_BEARER={0x4}]}, 0x68}, 0x1, 0x0, 0x0, 0x14}, 0x4040010) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r2, &(0x7f0000000100)={0x2e, 0x3, 0x0, {0x1, 0xd, 0x0, '/dev/binder#\x00'}}, 0x2e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0xb8ab9eb72170ec79) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000040)='/*eth0$wlan0GPL(\x00'}, 0x30) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x6f) 17:06:40 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x200040, 0x0) ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x1) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000100)={0x1, 0x101}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0f63000000040000000000000000000075c1e2e448838bdde60d121b20a58001bd2b38c040210753799740de8c819b17c77557736c6c506091e295091c8986ef230b9f57eb0e13"], 0x0, 0x0, 0x0}) 17:06:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_GET_SECUREBITS(0x1b) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0x0, 0x7, 0x18}, 0xc) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000640)={r2, &(0x7f0000000500)="36a3646163f8cb7450e0eddfe4e1356c22a8e92b1163f66d0bace5544b7b9b91db71b84bb2d3fdab43a07344d9d373797c26569a55174ac7237fd806e419382ad81670f3782f2d82020fdcaef3e256a95996342d20459a692118e807e3fb5d87af826893aac1c1a703848572b153ca8877c972be51223a95ae2c798295d574d4eb4e7a2f30209b67c0741b1956bc20b0076af67e1009608a4e517f5159ba8c72a311fcc3bf85fb216e183e4ccb6a51fdda630adcf82bfeb9f811bc00", &(0x7f00000005c0)=""/119}, 0x18) readv(r0, &(0x7f0000000440)=[{&(0x7f0000000000)=""/237, 0xed}, {&(0x7f0000000140)=""/84, 0x54}, {&(0x7f00000001c0)=""/167, 0xa7}, {&(0x7f0000000280)=""/125, 0x7d}, {&(0x7f0000000300)=""/96, 0x60}, {&(0x7f0000000380)=""/132, 0x84}, {&(0x7f0000001200)=""/4096, 0x1000}], 0x7) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) creat(&(0x7f00000000c0)='./file0\x00', 0x140) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:40 executing program 1: keyctl$KEYCTL_PKEY_SIGN(0x1b, &(0x7f00000000c0)={0x0, 0x4a, 0x12}, &(0x7f0000000100)={'enc=', 'oaep', ' hash=', {'sha384-arm64\x00'}}, &(0x7f0000000180)="dfcff6f56dadfbbfa0f38fc63f1f2443003818494bf3317aedda351e2898b7de33ed6604682a8557cbeb21e456b5bfe674048cec6de10f471ea89285f8945bf6afd6074513a2b5ea2f5e", &(0x7f0000000200)=""/18) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x1f) keyctl$setperm(0x5, r0, 0x2000) keyctl$get_security(0x11, r0, 0x0, 0x0) 17:06:40 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) clock_gettime(0x2, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) lstat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) r3 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r2, r3) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r4 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r4) [ 1380.107256] binder: 10899:10925 Acquire 1 refcount change on invalid ref 248 ret -22 [ 1380.116213] binder: 10899:10925 unknown command 2147483647 [ 1380.122525] binder: 10899:10925 ioctl c0306201 20008fd0 returned -22 [ 1380.144168] binder: undelivered death notification, 0000000000000000 17:06:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = dup2(r1, r0) getsockopt$inet6_opts(r2, 0x29, 0x39, &(0x7f00000000c0)=""/32, &(0x7f0000000100)=0x20) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:40 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$sock_inet_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r2, 0x34) 17:06:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='fdinfo\x00') ioctl$EVIOCRMFF(r1, 0x40044581, &(0x7f00000000c0)=0x400) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) fsetxattr$security_capability(r2, &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x4, 0x8}, {0x100, 0x3}]}, 0x14, 0x2) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1}}, 0x30) setsockopt$packet_buf(r4, 0x107, 0xf, &(0x7f0000000040)="1ee157dd8b5deadad817c34f", 0xc) close(r0) 17:06:40 executing program 1: r0 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000140)='keyring\x00', 0xfffffffffffffffe) add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, r0) r1 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r1, 0x0, 0x0) [ 1380.157552] binder: undelivered death notification, 0000000000000000 17:06:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000080)=0x68) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:40 executing program 1: r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) r2 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, r0) keyctl$get_security(0x11, r0, &(0x7f0000000100)=""/184, 0xb8) keyctl$get_security(0x11, r2, 0x0, 0x0) 17:06:40 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/mls\x00', 0x0, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000280)={0x14, 0x13, 0x2, {0x4, 0x1}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = fcntl$dupfd(r0, 0x0, r2) write$selinux_access(r4, &(0x7f0000000000)={'system_u:object_r:ssh_exec_t:s0', 0x20, 'unconfined_u:system_r:insmod_t:s0-s0:c0.c1023', 0x20, 0x80000004}, 0x63) pipe2$9p(&(0x7f0000000380), 0x1000000080000) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r5 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4001002}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x44, r5, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(r0) [ 1380.201174] binder: undelivered death notification, 0000000000000000 [ 1380.310866] binder: 11003:11015 unknown command 25359 [ 1380.316101] binder: 11003:11015 ioctl c0306201 20000040 returned -22 17:06:41 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) write$UHID_CREATE2(r1, &(0x7f0000000180)={0xb, 'syz0\x00', 'syz0\x00', 'syz1\x00', 0x6e, 0x10001, 0x80000000, 0x20, 0x20, 0x5, "1a133cbd39e43ba4b15b7f6b6d11890aa9df9be8e53361121694aa4dc0815f2d3d183132d8385dd4be6b589607eda38619f2a4337ba5b21371e9e7a70a45e22116dbe791bbf123f7a4aed67189d33489fe9f68ae0f2c8c54fc988a29bcabf2bc4ee234fa61062f9cc2bf7c10d554"}, 0x186) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r2, 0x0, 0x483, &(0x7f0000000100)={0x3b, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e23, 0x0, 'rr\x00', 0x20, 0x4b, 0x3}, 0x2c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0xffffffffffffffdf, 0x0, &(0x7f00000001c0)=[@acquire], 0x0, 0x0, 0x0}) close(r0) gettid() epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e630000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c28ff00"], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$instantiate(0xc, r0, &(0x7f0000000040)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'em0', 0x20, 0x20}, 0x2d, r0) keyctl$setperm(0x5, r0, 0x3) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$unlink(0x9, r0, r0) 17:06:41 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r1) 17:06:41 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x105000, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r1, 0x4) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f00000000c0)=0x1) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x100000001) socketpair$unix(0x1, 0x400000000000002, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:41 executing program 1: r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000001340)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$setperm(0x5, r0, 0x0) keyctl$get_security(0x11, r0, 0x0, 0x0) keyctl$get_security(0x11, r0, &(0x7f0000000040)=""/213, 0xd5) [ 1381.083275] binder: 11017:11022 unknown command 25358 [ 1381.107644] binder: 11017:11022 ioctl c0306201 20008fd0 returned -22 [ 1381.118385] binder: 11017:11022 unknown command 16721932 [ 1381.123941] binder: 11017:11022 ioctl c0306201 2000dfd0 returned -22 [ 1381.133517] binder: 11017:11022 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1381.142314] binder: 11017:11035 unknown command 25358 [ 1381.147639] binder: 11017:11035 ioctl c0306201 20008fd0 returned -22 [ 1381.154251] binder: 11017:11022 unknown command 16721932 [ 1381.159831] binder: 11017:11022 ioctl c0306201 2000dfd0 returned -22 17:06:43 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) gettid() fcntl$setsig(r0, 0xa, 0x23) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) fcntl$setown(r0, 0x8, r2) r3 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='/dev/full\x00', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r3, 0x7e, 0x1000}, &(0x7f0000000140)={'enc=', 'oaep', ' hash=', {'digest_null\x00'}}, &(0x7f00000001c0)="1dc2eb8be994c49e6bba20123d62a9742d10e5a38e5b7ea06efdf396005b8f3308daa86bc151de38d690285ead164671cf883938710a6828ee131b9cf9bd44e0518cdd30e63902d031b16b54f11d2d0f1ee396bbb34972aad4497fb0bc671221299fb1e18769ce1c38345ba9580c30e4a0da1f28e483f5083bee82f54a8d", &(0x7f0000000240)=""/4096) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) 17:06:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000002f80)='/dev/null\x00', 0x602, 0x0) sendmsg$nl_netfilter(r2, &(0x7f00000030c0)={&(0x7f0000002fc0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000003080)={&(0x7f0000003000)={0x70, 0x10, 0x2, 0x0, 0x70bd2b, 0x25dfdbfd, {0x3, 0x0, 0x6}, [@generic="1d8f4b6ce8dd893a54e22ccfe0f9effa5d8f4311ab462e94f11f994d6f81a04ba0d3e62becad4b5d5980fd374b6955c29b7dcec3c39389ebc428802cc59c088c40522d480d68f690522dc2ae2eb3f95d3b", @typed={0x8, 0x8b, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x44000) clone(0x1828000, &(0x7f0000000000)="6db2c544232516c7068bf660078d59890f463ba0db118a62c91f46c571c98dad4766c78b4dd7dc4e78a7e956ac83a93c97d1fb3b26d5d50acb3b03e5be1ee3252ca4f20976bc02a6", &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="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") ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000001840)='/proc/self/net/pfkey\x00', 0x80, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000018c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_DISABLE(r3, &(0x7f0000001ac0)={&(0x7f0000001880)={0x10, 0x0, 0x0, 0x18201}, 0xc, &(0x7f0000001a80)={&(0x7f0000001900)={0x140, r4, 0x2, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x32623f3f}]}, @TIPC_NLA_NET={0x60, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8001}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0xffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xfffffffffffffff7}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x2, @dev={0xfe, 0x80, [], 0x22}, 0x8a2}}}}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffffffffffc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x101}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100000001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5e42}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x451}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x48040}, 0x8000) r5 = open(&(0x7f0000001180)='./file0\x00', 0x80, 0x1ff) getsockopt$ARPT_SO_GET_ENTRIES(r5, 0x0, 0x61, &(0x7f0000001740)={'filter\x00', 0x79, "fbffe235b29dd74876777e2165f2f438ea0fb071c0e8eaa9ed2be93ce4913910c1402d37af403d11249a7b1b0f821c5893a6322347046029c2ef643033334aadf5025c5d287ead54d5611f0a31a68e2078272b814555277bdfb69c51edf3cdb583ac525721ae58d3caeab52e5847064595f0f3f50d03d3b366"}, &(0x7f0000001800)=0x9d) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r6 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000001200)={0x5f48, {{0xa, 0x4e22, 0x6, @remote, 0x6}}, 0x0, 0x9, [{{0xa, 0x4e22, 0x0, @rand_addr="bad9ba26f8334b8fd97f0d7544acddb2", 0x1}}, {{0xa, 0x4e21, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xd}}, 0xc7}}, {{0xa, 0x4e23, 0x6, @remote, 0x800000000000}}, {{0xa, 0x4e22, 0x8, @local, 0x3}}, {{0xa, 0x4e23, 0x200000, @ipv4={[], [], @rand_addr=0x2c1}, 0x6}}, {{0xa, 0x4e22, 0x0, @dev={0xfe, 0x80, [], 0x12}, 0xfffffffffffffffa}}, {{0xa, 0x4e20, 0x4, @rand_addr="4b28d1d89e24f7674ed411b5f3154650", 0x3}}, {{0xa, 0x4e23, 0x40, @loopback, 0x9}}, {{0xa, 0x4e24, 0xff, @mcast1, 0x7fff}}]}, 0x510) 17:06:43 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x0) 17:06:43 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000040)={0xfffffffffffff78b, 0x7f, 0x1f, 0x0, 0x1ff, 0xb}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) socketpair(0x2, 0x7, 0x8001, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_COOKIE(r2, 0x1, 0x39, &(0x7f00000002c0), &(0x7f0000000300)=0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05fd7f50f59d2c09ee1ca70b036e108f6300400000e0ff"], 0x0, 0x0, 0x0}) close(r0) r3 = dup(r1) recvfrom$inet6(r3, &(0x7f0000001040)=""/4096, 0x1000, 0x2000, &(0x7f00000001c0)={0xa, 0x4e24, 0xaa1f, @ipv4={[], [], @broadcast}, 0x3ff}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000200)={0x200, 0x1, 0x8, 0x4, 0xa768}, 0xc) getsockname$unix(r3, &(0x7f00000000c0)=@abs, &(0x7f0000000180)=0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) ioctl$IOC_PR_CLEAR(r3, 0x401070cd, &(0x7f0000000240)={0x43}) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:43 executing program 0: r0 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0xfffffffffffffffc) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) write$apparmor_current(r2, &(0x7f0000000180)=@profile={'stack ', 'vmnet0\x00'}, 0xd) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) mmap$binder(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1, 0x11, r0, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c40000000000000000000000200"], 0x0, 0x0, 0x0}) 17:06:43 executing program 1: r0 = gettid() rt_sigprocmask(0x0, &(0x7f0000000080)={0xfffffffffffffffe}, 0x0, 0x8) rt_sigtimedwait(&(0x7f0000000000)={0x7fff}, 0x0, 0x0, 0x8) rt_sigqueueinfo(r0, 0xe, &(0x7f00000000c0)={0x0, 0x0, 0xfffffffffffffffe}) rt_sigprocmask(0x0, &(0x7f0000000040)={0x100000000}, &(0x7f0000000140), 0x8) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) select(0x40, &(0x7f0000000200)={0x80, 0x0, 0xb24, 0x66, 0xfffffffffffffffc, 0x6, 0xffffffffffffff81, 0xab73}, &(0x7f0000000240)={0x7fffffff, 0x100, 0x8, 0x2, 0x9, 0x0, 0x3, 0xd3e8}, &(0x7f0000000340)={0xc70, 0x9, 0xffffffff, 0x9, 0x81, 0x8, 0x7f, 0x5}, &(0x7f0000000380)={r1, r2/1000+10000}) timer_create(0x2, &(0x7f0000000300)={0x0, 0x1f, 0x2, @thr={&(0x7f0000000280)="e92ca53bdf2e31307a482b678148d29bd032435f0f47d54fbb82271bc3f2589f8db8ff7124", &(0x7f00000003c0)="3850842d017af36d28f7ab9294506dfc8a73e11104e939e7917b9092768ba595656cc1175546e2cb2d12965cdb880cd298a81d2e9283ff6e8a2022dc635526870714d8b6e470142bd98f8c35d93a75292f357bd01d203fd4d5dc197af42099d1c7157bac336c2fabc2afb35ea4167cadef033cbc2b0c8704d970f23df12f217061b45ad446352d01efe39457070d912f175068f0022f70b9a5521f1f3f"}}, &(0x7f0000000480)=0x0) rt_sigprocmask(0x0, &(0x7f0000000580)={0x3}, &(0x7f00000005c0), 0x8) timer_settime(r3, 0x0, &(0x7f00000004c0)={{0x0, 0x989680}}, &(0x7f0000000500)) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) write$eventfd(r4, &(0x7f00000001c0), 0x8) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000540)=0x3) [ 1383.202125] binder: 11043:11045 unknown command 1350565125 [ 1383.211537] binder: 11043:11045 ioctl c0306201 20012000 returned -22 [ 1383.228414] binder: 11043:11045 unknown command 0 [ 1383.234082] binder: 11043:11045 ioctl c0306201 20008fd0 returned -22 17:06:43 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x9) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/member\x00', 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="00000003000f000008000200", @ANYRES32=0x6, @ANYBLOB="1800120008000100767469000c00020008000400e000000239eca618a6e0181c6aa4974b73f7b836403f6c1b4483fca7f0740000000000000000000000020000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) close(r0) [ 1383.251059] binder: 11043:11045 ioctl 401070cd 20000240 returned -22 [ 1383.264550] binder: 11043:11045 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1383.281842] binder: 11043:11071 unknown command 1350565125 [ 1383.291450] binder: 11043:11071 ioctl c0306201 20012000 returned -22 17:06:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x200000) ioctl$FICLONE(r0, 0x40049409, r1) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f0000000040)={@remote, @dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0xffffffffffff8001}, 0xc) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r2) 17:06:43 executing program 2: r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000000)=0x2) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) ppoll(&(0x7f0000000240)=[{r1, 0xffffffffffffffff}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000080)={0x0, 0x200000022d, 0x0, 0x0, 0x4}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000180)={0x4000000060000001}) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r2) 17:06:43 executing program 5: prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000)) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0)='/selinux/enforce\x00', 0x2000, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000000000000000000000000000000000900000003000000d00200000000000000000000000000000000000000000000000200000002000000020000000200000002000003000000", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000008c8edd99e9ffffff000400"/48], @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c800e80000000000000000000000000000000000000000000000000020004e4f545241434b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8001801000000000000000000000000000000000000000000000000300066726167000000000000000000000000000000000000000000000000000000000000010000009d0300000003000020004e4f545241434b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff00000000"], 0x330) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x1c, r1, 0x10, 0x70bd2c, 0x25dfdbfc}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x4) r2 = syz_open_dev$binder(&(0x7f0000000080)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f00000000c0)=@generic, &(0x7f0000000040)=0x80, 0x80800) ioctl$sock_ifreq(r3, 0x89f3, &(0x7f0000000140)={'bpq0\x00', @ifru_flags=0xc002}) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x4, 0x0, &(0x7f0000000380)="b1618c8f"}) [ 1383.300968] binder: 11043:11071 unknown command 0 [ 1383.320548] binder: 11043:11071 ioctl c0306201 20008fd0 returned -22 [ 1383.330906] binder: 11043:11071 ioctl 401070cd 20000240 returned -22 17:06:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) setsockopt$sock_timeval(r2, 0x1, 0x14, &(0x7f00000000c0), 0x10) ioctl$FS_IOC_MEASURE_VERITY(r1, 0xc0046686, &(0x7f0000000100)={0x4, 0x3, "747b98"}) [ 1383.347042] binder: 11043:11071 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1383.364376] binder: 11087:11088 got reply transaction with no transaction stack [ 1383.374537] binder: 11087:11088 transaction failed 29201/-71, size 0-0 line 2921 [ 1383.390770] binder: undelivered TRANSACTION_ERROR: 29201 [ 1383.398430] binder: 11094:11095 ioctl c0046686 20000100 returned -22 [ 1383.405320] binder: 11087:11098 got reply transaction with no transaction stack [ 1383.405328] binder: 11087:11098 transaction failed 29201/-71, size 0-0 line 2921 [ 1383.405617] binder: undelivered TRANSACTION_ERROR: 29201 [ 1383.437094] binder: undelivered death notification, 0000000000000000 [ 1383.443657] binder: undelivered death notification, 0000000000000000 [ 1384.081527] binder: 11072:11077 unknown command 536872576 [ 1384.087130] binder: 11072:11077 ioctl c0306201 20008fd0 returned -22 17:06:46 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x80002000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x200000, 0x0) tkill(r1, 0x38) 17:06:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000000)=0x400100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = dup2(r1, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() bind$inet6(r2, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={[], [], @initdev}}, 0x1c) fcntl$getflags(r2, 0x40b) ptrace$setopts(0x4206, r3, 0x0, 0x0) tkill(r3, 0x27) fcntl$setstatus(r1, 0x4, 0x427fd) getsockopt$inet_mreqn(r2, 0x0, 0x0, &(0x7f0000000180)={@empty, @broadcast, 0x0}, &(0x7f00000001c0)=0xc) ioctl$TUNSETIFINDEX(r2, 0x400454da, &(0x7f0000000200)=r4) 17:06:46 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x400000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:46 executing program 5: mknod(&(0x7f00000001c0)='./bus\x00', 0x0, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) write$FUSE_LSEEK(r0, &(0x7f0000000080)={0x18}, 0x18) r1 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) r2 = open(&(0x7f0000000600)='./bus\x00', 0x6, 0x0) write$P9_RATTACH(r2, &(0x7f0000000000)={0xffffffffffffffc0, 0x69, 0x0, {0x0, 0x0, 0x4}}, 0xff03) splice(r1, 0x0, r2, 0x0, 0xffffffff, 0x0) fcntl$setpipe(r0, 0x408, 0x0) 17:06:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/policy\x00', 0x0, 0x0) ioctl$TUNSETNOCSUM(r2, 0x400454c8, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:46 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0x0, 0x802) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = getpid() sched_setscheduler(r2, 0x3, &(0x7f00000000c0)=0xffffffffffff8336) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:46 executing program 5: r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/load\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) write$selinux_load(r0, &(0x7f0000000140)={0xf97cff8c, 0x8, 'SE Linux', "1200000006c46f0006000000070000003c9f0300000000000000c2080000000061f071f50aec5843"}, 0x38) [ 1386.214927] binder: undelivered death notification, 0000000000000000 17:06:46 executing program 5: r0 = socket$inet6(0xa, 0x2100000400000002, 0x0) vmsplice(r0, &(0x7f0000000080)=[{&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000000)="8557ba8744824339be187806b75ced37cd83bf02d159f5b619981ac1da5b0d7c0b14420931a4acde1fd6c89f2add52600e56d62907110591b2a57e0c8e2524a7b6bf6338a9ae0479152774485970a06db16018c7e7caf68f5679ddd08b9d78d23228f696bccf3d53d049cd2e23fb2fbf80", 0x71}], 0x2, 0x8) prctl$PR_SET_UNALIGN(0x6, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x7f, 0xa, 0x5}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x2b}, 0x0, @in6=@initdev}}, 0xe8) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) 17:06:46 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() timerfd_create(0x6, 0x80000) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x84000) tkill(r0, 0x34) 17:06:46 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00') ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) readv(r0, &(0x7f0000000240)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000080)=""/185, 0xb9}], 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="099a9ad12987b05e1815390ec80a59dac0053c161ee4c6523c9cfdbb91aff30730d51112dda2d7e5ed0c6b7c83d8c934cdc96f5df68939acb884ca5d238cb0870618160ff346cadee86dccbea44b802caa574dcb44c3d64228ee19e304ed6c224d46d67030812801582a991c85e720dfa14ead1f56345705a5687ed813fef852db7c6e26ae4b92e51ca8d5cfe870390ca63d1c7efc677f00000000000000bc4b1799625c9400"/182], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1386.274824] binder: undelivered death notification, 0000000000000000 17:06:46 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004000) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1386.341682] binder: 11148:11149 unknown command -778397175 [ 1386.349477] binder: 11148:11149 ioctl c0306201 2000dfd0 returned -22 [ 1386.359406] binder: undelivered death notification, 0000000000000000 [ 1386.370416] binder: 11148:11149 unknown command 0 [ 1386.375614] binder: 11148:11157 unknown command -778397175 [ 1386.375623] binder: 11148:11157 ioctl c0306201 2000dfd0 returned -22 [ 1386.381480] binder: 11148:11159 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1386.401626] binder: undelivered death notification, 0000000000000000 [ 1386.425240] binder: 11148:11149 ioctl c0306201 20008fd0 returned -22 17:06:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mknod(&(0x7f0000000200)='./bus\x00', 0x100c, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x2, 0x0) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000140)=0xc) ptrace$setopts(0x4206, r2, 0x81, 0x0) r3 = open(&(0x7f0000000600)='./bus\x00', 0x2, 0x0) splice(r1, 0x0, r3, 0x0, 0xffffffff, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x0) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000001040)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r5 = gettid() tkill(r5, 0x1000000000016) listxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/118, 0x76) write$P9_RREADLINK(r4, &(0x7f0000000000)={0x19, 0x17, 0x0, {0x10, './file0/../file0'}}, 0x19) 17:06:47 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)={0x0, @speck128, 0x3, "3c3cbd37e01eecca"}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000600)=""/164) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140)="b30b488b8d030ab103b38ba2b3c644e1e22aafa3404e6e091f17a9d5690ca8195c780f21b8cc8d044454ec970cdcf4345d8f99b6e6a34c2c48761c48bb752811890e9f2d0e02d021d6b30e79540e616d0008e6ce1f1298ce2e", 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800000000000030c7a4ae32adaff9d49a6a1a39023184bb309855d8459288ca9f67968f603fce120ac4c386aad03e6e3e9d28", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='reno\x00', 0x5) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) close(r3) ftruncate(r5, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) tgkill(r8, 0x0, 0x3a) perf_event_open(&(0x7f0000000700)={0x3, 0x70, 0x3, 0xb26, 0x3, 0x100000001, 0x0, 0x2, 0x2, 0x2, 0x1, 0x4, 0x3, 0x4, 0x3e9c, 0x2, 0x3, 0x3, 0xfffffffffffffffa, 0x9, 0x1000, 0x1, 0x100, 0x80, 0x80000000, 0x80, 0x1, 0x2, 0x42, 0x5, 0x3f, 0x4800000000, 0x4, 0x6, 0x5, 0x5, 0x7, 0x1000, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x40, 0x0, 0x200, 0x9, 0xb79a, 0x0, 0xe869}, r8, 0x10, 0xffffffffffffffff, 0x3) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000480)) write(r7, &(0x7f00000001c0), 0xfffffeda) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) setxattr$security_ima(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000ee9e0a2f5c17790d1100000027445a99d6d2fa18d0512c27ffefef48a5d00b9a335e7f06f335e31d79597074ef4f"], 0x1, 0x3) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) ioctl$KDSETMODE(r0, 0x4b3a, 0x200000fff) sendfile(r5, r5, &(0x7f0000000780)=0x1, 0x8000ffffffbe) fcntl$getown(0xffffffffffffffff, 0x9) 17:06:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x800) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0f630c4000000000000000f8ff000000"], 0x0, 0x0, 0x0}) 17:06:47 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x4000004001, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) listen(r1, 0x5) ioctl$TCGETS(r3, 0x5401, &(0x7f0000000040)) 17:06:47 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:47 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x4, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f00000000c0)=[@register_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1386.493589] binder: 11174:11181 unknown command 0 [ 1386.499165] binder: 11174:11181 ioctl c0306201 20008fd0 returned -22 [ 1386.503181] binder: 11114:11184 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:06:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r2, &(0x7f00000006c0)=[{{&(0x7f00000000c0)=@ethernet={0x0, @link_local}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/154, 0x9a}, {&(0x7f0000000240)=""/87, 0x57}, {&(0x7f00000002c0)}, {&(0x7f0000000300)=""/20, 0x14}, {&(0x7f0000000340)=""/76, 0x4c}], 0x5, &(0x7f0000000440)=""/3, 0x3}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)=""/197, 0xc5}], 0x1, &(0x7f00000005c0)=""/208, 0xd0}, 0x7}], 0x2, 0x20, &(0x7f0000000740)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1386.533906] binder: undelivered death notification, 0000000000000000 [ 1386.590468] selinux_nlmsg_perm: 20 callbacks suppressed [ 1386.590478] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11188 comm=syz-executor.5 [ 1386.632803] binder: 11200:11205 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:06:49 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x81000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x1, 0x0) tkill(r0, 0x34) 17:06:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mmap$binder(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) capget(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x5}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="148c0f34"], 0x4}}, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x3b) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) sendmsg$sock(r0, &(0x7f00000014c0)={&(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @empty}, 0x0, 0x4, 0x1, 0x4}}, 0x80, &(0x7f00000013c0)=[{&(0x7f0000000040)="4f6377c7", 0x4}, {&(0x7f00000001c0)="239a40a87cd18962c1a5ac8b5887b43b01d5f3e6f36ecc00ba08670fba2317091ac7268a04", 0x25}, {&(0x7f0000000200)="bea7e0120bd9cd20408d664f5afde66fe86daeec8eb2b6900e720d39a2af9e2fd04704f45914ad18a350beaec302c0b66ae95f2c38d185d0f544091b8b45bf5b0345f3979c7332c3652d263d5634f22dfc16221976bc2a368cf77361a85d9c5ba67feaa87b5e32603b0c4b3c3e9c6015dbbbd7c69c66739186a69001065d28ed5d4b47533744f8872984774c40df8b7c6cc20450b218dbbb86cd9734f5fae4b639e691398002eb02744171c376f6e9460a011c0efa2b41a2f03e15cfa9acc94a56e6404624c1ebb27b3587259740325f7dc0f87f22dc1c6a7875f5e02fabd41d568f6f86532b03ccac2aae195e60419d8e9a3438c132c2", 0xf7}, {&(0x7f00000003c0)="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", 0x1000}, {&(0x7f0000000300)}, {&(0x7f0000000340)="0869e185e2d28c28a866af42", 0xc}], 0x6, &(0x7f0000001440)=[@mark={{0x14, 0x1, 0x24, 0x3}}, @txtime={{0x18, 0x1, 0x3d, 0x7}}, @mark={{0x14, 0x1, 0x24, 0x4}}], 0x48}, 0x8000) ptrace$cont(0x7, r2, 0x0, 0x0) 17:06:49 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000000)='posix_acl_accessvmnet0.vmnet1{prockeyring\x00') 17:06:49 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000000c0)=0x4) r2 = syz_open_dev$binder(0x0, 0x0, 0x802) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="bbb24d3fe8b86e0c630000402cd1d78adbdfbce9df94895270092b18253d9c3c25f1e95e8d9782e3f14cfdc77f845a78bad69f5f13d82b56e616120bd817d320e86c8ee7e9d735799d1bafdb5bdee868419bba6f3eb79d39e1f94770cc77dd5ab40d69da59eeed578ccccaff6f0c0ba8dc83364911be9fe58786f67eae2eafbc0516e8fd812bf792c5d954c00d4e00"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:49 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)={0x0, @speck128, 0x3, "3c3cbd37e01eecca"}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000600)=""/164) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140)="b30b488b8d030ab103b38ba2b3c644e1e22aafa3404e6e091f17a9d5690ca8195c780f21b8cc8d044454ec970cdcf4345d8f99b6e6a34c2c48761c48bb752811890e9f2d0e02d021d6b30e79540e616d0008e6ce1f1298ce2e", 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800000000000030c7a4ae32adaff9d49a6a1a39023184bb309855d8459288ca9f67968f603fce120ac4c386aad03e6e3e9d28", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='reno\x00', 0x5) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) close(r3) ftruncate(r5, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) tgkill(r8, 0x0, 0x3a) perf_event_open(&(0x7f0000000700)={0x3, 0x70, 0x3, 0xb26, 0x3, 0x100000001, 0x0, 0x2, 0x2, 0x2, 0x1, 0x4, 0x3, 0x4, 0x3e9c, 0x2, 0x3, 0x3, 0xfffffffffffffffa, 0x9, 0x1000, 0x1, 0x100, 0x80, 0x80000000, 0x80, 0x1, 0x2, 0x42, 0x5, 0x3f, 0x4800000000, 0x4, 0x6, 0x5, 0x5, 0x7, 0x1000, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x40, 0x0, 0x200, 0x9, 0xb79a, 0x0, 0xe869}, r8, 0x10, 0xffffffffffffffff, 0x3) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000480)) write(r7, &(0x7f00000001c0), 0xfffffeda) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) setxattr$security_ima(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000ee9e0a2f5c17790d1100000027445a99d6d2fa18d0512c27ffefef48a5d00b9a335e7f06f335e31d79597074ef4f"], 0x1, 0x3) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) ioctl$KDSETMODE(r0, 0x4b3a, 0x200000fff) sendfile(r5, r5, &(0x7f0000000780)=0x1, 0x8000ffffffbe) fcntl$getown(0xffffffffffffffff, 0x9) 17:06:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00633d4c316d11b38937ee91438889b9bdea7f3360b57a889d6328178b267a8c58635e3febfb31df746ee8427823897cba7654ca4417297411f0f20f273cf76762e30ea71beecd3669"], 0x0, 0x0, 0x0}) keyctl$join(0x1, &(0x7f0000000200)={'syz', 0x1}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/context\x00', 0x2, 0x0) finit_module(r0, &(0x7f0000000340)='/selinux/context\x00', 0x3) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x4) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0xc, 0x0, &(0x7f00000000c0)=[@enter_looper, @decrefs={0x40046307, 0x3}], 0x5e, 0x0, &(0x7f0000000180)="2014d5b627765addb2b0702f2f3c5573976049e1b4443aa726dabda31ea499dfbc941d427dc8e37a150ee3f3ca4a87fd598cd682cbe11de183ce5a6a43a801df5297954bfa624efd775460784bef4a970cfaaa644e8f17f8db64464eba9a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) epoll_ctl$EPOLL_CTL_MOD(r3, 0x3, r0, &(0x7f0000000280)) 17:06:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1389.337546] binder: 11217:11219 unknown command 1279091456 [ 1389.344314] binder: 11217:11219 ioctl c0306201 20012000 returned -22 [ 1389.354593] binder: 11217:11219 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1389.362522] binder: 11217:11219 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 1389.367063] binder: 11233:11236 unknown command 1062056635 [ 1389.367071] binder: 11233:11236 ioctl c0306201 2000dfd0 returned -22 17:06:50 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000440)={@mcast2, 0x2, 0x1, 0x3, 0x1, 0x1, 0x1ff}, &(0x7f0000000480)=0x20) clock_gettime(0x0, &(0x7f0000000140)) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) getsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000000)=""/239, &(0x7f0000000100)=0xef) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f00000001c0)="e24a370381959729898f80475b054e73fce877ea3fc09455f57383b929d55bed85f534e7f36b7ea1b9e5c60ce42b06de2da26787a5c2d34891def4964786a48e47377fe2a2dbaa727ebafce64a9c68275811e8bef34107e8ab891788fa577c388814d475450334fcac5c9214e1c288ac8298f8ad7a081369a4a11a9318353dc28c7c397f1bdb66919bada604abedd7b3fee5b7a6d955b3040546fd7181", 0x9d) ioctl$TIOCNXCL(r1, 0x540d) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:50 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="056304400000000065648800009c67ae6ef13e6f9f053b9b20241ba2f224042ec000100000e1e4649d41a8d9697ca0a08831e908e5d3b82407990d7a261400"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0}) [ 1389.367719] binder: undelivered death notification, 0000000000000000 [ 1389.384472] binder: 11233:11239 unknown command 1062056635 [ 1389.384483] binder: 11233:11239 ioctl c0306201 2000dfd0 returned -22 17:06:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') ioctl$ASHMEM_SET_PROT_MASK(r0, 0x40087705, &(0x7f0000000000)={0x6e86, 0x1ff}) close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file0\x00', 0x200, 0x24) utimensat(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x77359400}}, 0x100) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x78) 17:06:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FICLONE(r1, 0x40049409, r1) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x4) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000000)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) 17:06:50 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0xb) sendto$inet(r2, &(0x7f00000006c0)="a389038986ec40589aed1a9d56ae706a1464547a15f4060df8128eae1d04de4c11cfb35b7de700784f17aa3279c80ceab2471103843d1a93a823ca18c078868814c8252a218e9f443c9997da79c0fd51df50bb2f363f6893a8a4", 0x5a, 0x0, &(0x7f0000000740)={0x2, 0x4e24, @multicast2}, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f00000005c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x58, r3, 0x800, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x51e8}, @IPVS_CMD_ATTR_SERVICE={0x24, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0xffffffffffffffff}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x40}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xacd}]}, 0x58}}, 0x0) r4 = socket(0x10, 0x80005, 0x8001) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x2fc, r5, 0x410, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_NET={0x34, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x80}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x30}, @TIPC_NLA_NET_NODEID_W1={0xc}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_LINK={0xc4, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1bc3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x11b6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}]}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_NODE={0x40, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xde}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8000}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x8b17}]}, @TIPC_NLA_NET={0x48, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe9}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x30c69f13}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x81}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x985}]}, @TIPC_NLA_LINK={0x5c, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xb0}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x9, @rand_addr="ef42f15ce6f5b4f365a9b24d04cd7e4e", 0x81}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x5, @mcast1, 0x185a}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x80, @mcast2, 0x7}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x5, @ipv4={[], [], @empty}, 0x401}}}}]}, @TIPC_NLA_NET={0x3c, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xffffffffffffffff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xaa}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x800}, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x0) close(r0) getresuid(&(0x7f0000000440), &(0x7f0000000600), &(0x7f0000000640)) [ 1389.447630] binder: 11251:11254 ioctl 660c 0 returned -22 [ 1389.448461] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11241 comm=syz-executor.5 17:06:50 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x80000400, 0x0) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x6a) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000100)={0x400, 0x8, 0x2}) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) r4 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000040)='/dev/keychord\x00', 0x14000, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') [ 1390.130543] binder: 11217:11284 unknown command 1279091456 [ 1390.146878] binder: 11217:11284 ioctl c0306201 20012000 returned -22 [ 1390.153687] binder: 11217:11219 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1390.160882] binder: 11217:11285 DecRefs 0 refcount change on invalid ref 3 ret -22 [ 1390.244842] binder: 11251:11265 ioctl 660c 0 returned -22 [ 1390.251000] binder: 11251:11254 unknown command 536872576 [ 1390.257401] binder: 11251:11254 ioctl c0306201 20008fd0 returned -22 17:06:52 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) listen(r1, 0x80) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r2, &(0x7f00000004c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x1c, r3, 0x600, 0x70bd25, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000040)={'ipddp0\x00', 0x1000}) sendto$inet6(r4, 0x0, 0xfffffffffffffdc6, 0x20000004, &(0x7f0000000280)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, 0x0) socket$inet(0x2, 0x80003, 0x0) syz_genetlink_get_family_id$nbd(0x0) sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, 0x0, 0x4040085) write(r4, &(0x7f0000000140)="f3fbd2e58ffbc7bba0679c67fdcd14c4ac2ca59d13f3dea78d6eed67dd8f4381b16d21d186082ea9033a58f1f07f15bacab07e295bf99c00efb43b36dda8b3c81e83786c1021f6feedb7f749", 0x4c) pipe(0x0) recvfrom$inet6(r4, &(0x7f0000001840)=""/31, 0xfffffe0e, 0x100, &(0x7f0000001880), 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x440, 0x0) poll(&(0x7f0000000200)=[{}, {r0}, {r2, 0x420}, {r4, 0x1060}, {r4}, {r4}], 0x6, 0xfffffffffffffffb) r5 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000300)="b227bbf9758f369e6d2348bd88deee4dfa1b82293eeb0f48885233388d6ea53e9c27cac88671add3fd9353dc07c2f122eb0d6b51222156f435d28b8460af897a24e9247a6264376a4c51623b1fee4752aa481a7c05256d30ad7d338f7f89bb37aeb6b5b0a74efc714530ee5ed7cf8abc6d35ad5222c44fa3dc2ad3f8343cfd47250000f70e4dd8594c838d88ece9bf38656131aedaf05fe5e5a1608ea992a7d9fc73e481f28b04e35415f6a237c5554f9ab512fe3d7e433795816689", 0xfffffffffffffed9, 0x0, 0x0, 0x0) 17:06:52 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) socket$unix(0x1, 0x2, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:52 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000, 0x0, 0x201d, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r2, 0xc0145401, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0x9, 0x1, 0x5}) close(r0) 17:06:52 executing program 5: pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000400)={0x0, @speck128, 0x3, "3c3cbd37e01eecca"}) write(r1, &(0x7f00000001c0), 0xfffffef3) r2 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f0000000600)=""/164) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x2, 0x0) clone(0x8860000, &(0x7f0000000140)="b30b488b8d030ab103b38ba2b3c644e1e22aafa3404e6e091f17a9d5690ca8195c780f21b8cc8d044454ec970cdcf4345d8f99b6e6a34c2c48761c48bb752811890e9f2d0e02d021d6b30e79540e616d0008e6ce1f1298ce2e", 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000005c0)={'veth1\x00', 0x200000005002}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="2800000000000030c7a4ae32adaff9d49a6a1a39023184bb309855d8459288ca9f67968f603fce120ac4c386aad03e6e3e9d28", @ANYRES32=0x0, @ANYBLOB="030000000000000008001b0000000000"], 0x28}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000500)='reno\x00', 0x5) r5 = open(&(0x7f0000002000)='./bus\x00', 0x143042, 0x0) close(r3) ftruncate(r5, 0x2007fff) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/policy\x00', 0x0, 0x0) tgkill(r8, 0x0, 0x3a) perf_event_open(&(0x7f0000000700)={0x3, 0x70, 0x3, 0xb26, 0x3, 0x100000001, 0x0, 0x2, 0x2, 0x2, 0x1, 0x4, 0x3, 0x4, 0x3e9c, 0x2, 0x3, 0x3, 0xfffffffffffffffa, 0x9, 0x1000, 0x1, 0x100, 0x80, 0x80000000, 0x80, 0x1, 0x2, 0x42, 0x5, 0x3f, 0x4800000000, 0x4, 0x6, 0x5, 0x5, 0x7, 0x1000, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000540), 0x8}, 0x40, 0x0, 0x200, 0x9, 0xb79a, 0x0, 0xe869}, r8, 0x10, 0xffffffffffffffff, 0x3) ioctl$TUNGETSNDBUF(r5, 0x800454d3, &(0x7f0000000480)) write(r7, &(0x7f00000001c0), 0xfffffeda) read(r6, &(0x7f0000000200)=""/250, 0x50c7e3e3) setxattr$security_ima(&(0x7f0000000340)='./bus\x00', &(0x7f00000003c0)='security.ima\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000ee9e0a2f5c17790d1100000027445a99d6d2fa18d0512c27ffefef48a5d00b9a335e7f06f335e31d79597074ef4f"], 0x1, 0x3) setxattr$security_selinux(&(0x7f0000000040)='./bus\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000000c0)='system_u:object_r:netutils_exec_t:s0\x00', 0x25, 0x3) ioctl$KDSETMODE(r0, 0x4b3a, 0x200000fff) sendfile(r5, r5, &(0x7f0000000780)=0x1, 0x8000ffffffbe) fcntl$getown(0xffffffffffffffff, 0x9) 17:06:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f00000000c0)={0x7, 0x3, 0x200, 0x5, 0xfff00000000000}) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x2f6, 0x0, &(0x7f0000000180)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="005316d6"], 0x0, 0x0, 0x0}) 17:06:52 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB="0e0000db00000000"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000100)=0x1c, 0x4) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x200000, 0x0) ioctl$RNDADDTOENTCNT(r2, 0x40045201, &(0x7f0000000040)=0x20) close(r0) 17:06:53 executing program 4: r0 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f0000000080)={0x3, 0x2, 0x6, 0x1, 0x2}) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f0000000040)={0x22, 0x3, 0x0, {0x1, 0x1, 0x0, '.'}}, 0x22) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setpgid(r1, r1) r2 = gettid() r3 = accept$unix(0xffffffffffffffff, &(0x7f00000000c0)=@abs, &(0x7f0000000140)=0x6e) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000180)) wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f00000001c0)=""/116) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) 17:06:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="08eed90000002000"/17], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0xfffffffffffffe56, 0x0, &(0x7f0000000180)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1392.348327] binder: 11292:11297 ioctl 801c581f 200000c0 returned -22 [ 1392.357646] binder: 11292:11297 unknown command 0 [ 1392.362704] binder: 11292:11297 ioctl c0306201 20000200 returned -22 [ 1392.372219] binder: 11292:11297 unknown command -703180032 [ 1392.378825] binder: 11292:11297 ioctl c0306201 20000040 returned -22 [ 1392.387308] binder: 11292:11297 ioctl 801c581f 200000c0 returned -22 [ 1392.424765] binder: 11324:11325 unknown command 14282248 [ 1392.432826] binder: 11324:11325 ioctl c0306201 20012000 returned -22 [ 1392.441127] binder: 11324:11325 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1392.450592] binder: 11324:11325 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1392.464672] binder: 11306:11328 unknown command -620756978 17:06:53 executing program 2: openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x2, 0x0) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) pipe(&(0x7f0000000040)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)={0x4}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/l2cap\x00') getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f0000000240), &(0x7f0000000280)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r3 = dup3(r1, r0, 0x80000) ioctl$int_out(r1, 0x5462, &(0x7f00000001c0)) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000000c0)=""/118) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r4 = dup(r1) ioctl$EXT4_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000180)=0x20000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x410040, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1392.468619] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11314 comm=syz-executor.5 [ 1392.471808] binder: 11324:11334 unknown command 14282248 [ 1392.471817] binder: 11324:11334 ioctl c0306201 20012000 returned -22 [ 1392.476004] binder: 11324:11334 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1392.512131] binder: 11337:11338 ioctl 5462 200001c0 returned -22 [ 1392.512186] binder: 11337:11338 ioctl 80404532 200000c0 returned -22 [ 1392.512330] binder: 11337:11338 ioctl 40086602 20000180 returned -22 [ 1392.512492] binder: undelivered death notification, 0000000000000000 [ 1392.521214] binder: 11337:11345 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1392.522494] binder: 11337:11345 ioctl 5462 200001c0 returned -22 [ 1392.522618] binder: 11337:11338 ioctl 80404532 200000c0 returned -22 [ 1392.697313] binder: 11306:11328 ioctl c0306201 20008fd0 returned -22 17:06:53 executing program 1: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f0000000140)=0x11) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x2000000000002, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02\x00', 0x20000005001}) fcntl$setflags(r0, 0x2, 0x1) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0x2, &(0x7f00000001c0)=0x6, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000180)=ANY=[@ANYBLOB="1400200007000007022565"], 0xb) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0x3ce) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0xffffffffffffffe6, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0xfffffe14) splice(r0, 0x0, r2, 0x0, 0xdf73, 0x0) 17:06:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x7ffffffffffd) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1c6304480000f600"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x333, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x36c, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) read(r2, &(0x7f0000001040)=""/4096, 0x1000) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x3, 0x0, 0x9, 0xe, 0x1d, "a8bc4dde766da4a5e4f943aa020a20497dcc2c922890c243e4f45fcb35cd5defc876f14d57963487c2674c884e1d6f7a17316d76299f1a6e665677627085a711", "4df9fd49647c8df5d7a36c28c446e8603950367cfd412be9b69552fb1504bd110c65d82e6160ccd4cb1f2e6d308e6f53e79867ddbee2ffa0c52f2b721bb85288", "2da4e46523888330d27aedc922fd13bef9ed04628c5b1f85698e688242b23c73", [0x401, 0x1644]}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:53 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) r3 = mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x5d) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x108, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="086310400200000000000000000000000000000010630840000000000000000001634040000000000000000000000000000000000000000011000000000000000000000078000000000000001800000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00'/32], @ANYBLOB="200000000000000000000000000000003700000000000000852a747001000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00'/162], @ANYBLOB="a20000000000000002000000000000001a00000000000000852a747000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'/116], @ANYBLOB="740000000000000001000000000000003f00000000000000"], @ANYPTR=&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00(\x00\x00\x00\x00\x00\x00\x00P\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="12634840020000000000000000000000000000000000000011000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="00000000000000000000000085616466000000000a0000000000000002000000000000002500000000000000852a6873001000000200"/68], @ANYPTR=&(0x7f00000006c0)=ANY=[@ANYBLOB="000035e33cd38fa0845b005c44003ea609d705008b8d399d9eef2b4b7b46392fd0894c25a39b615074e4864e2388c77771ddddeda1d0022e0320704afdd4117d961f9b2efeb701dfe131ea1e860d4d6af99a0f8b97e43fbee574cf0000905ff42ed0774633afefb136f8e21c72773cdbc83210756245b41883ff65804326ca5f"], @ANYBLOB="000400000000000011634840030000000000000000000000000000000000000011000000000000000000000050000000000000001800000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB="852a62770001000001000000000000000000000000000000852a687701000000000000000000000000000000000000008561646600000000060000000000000000000000000000002700000000000000"], @ANYPTR=&(0x7f0000000480)=ANY=[@ANYBLOB="000000000000000018000000000000003000000000000000"], @ANYBLOB="000000000000000003630840", @ANYRES64=r3], 0x34, 0x0, &(0x7f0000000600)="49319a31c151cdc088a60e1bc5c91e2ee8ccc2617508a5ce90bcae807627cebb4b26c5ad707c31d3baf73ced34849abf92da496c"}) 17:06:53 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0xfffffffffffffffd) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'vlan0\x00\x00\xf6\xff\xff\xff\xff\xff\xff\xff\x00', {0x2, 0x0, @loopback}}) 17:06:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r3 = gettid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000700)={{{@in=@broadcast, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000800)=0xe8) getgroups(0x4, &(0x7f0000000840)=[0x0, 0x0, 0xffffffffffffffff, 0xee01]) sendmmsg$unix(r1, &(0x7f0000000980)=[{&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="3f66c38e5924ed06dd92bcecb74fdc0e2e07b878a2c345f62797970fa1d0ad362ac97fbe507f3941f184690b26b20194b60eb6ea2b23378d86267bf4709e32face3a46c2ce24706f67eae152fd930365f6a271d3fcaf59675103ad85ee1141335586d9d61010f6ec784efddf10e253006c93132a3a75b540b5629bca3591361c75a8bbd36c74b435d95b30cd5fe00ced66dd5709d29d3c2f1f15e01aa29397d2b5ef7e120e6635e93a8bc6fd1e1eac455c623388ccf97e13b5e9bfeca2f67fc7897051020c9d8084aff750e96a5cd5c20df05860849835161bdb0126aee5732faa4e8fdaf65542eb", 0xe8}, {&(0x7f0000000080)="1d107577b3bb9676788dcae5dc58e55db9995518bc26b70cb8b67bcae2d05c1a0bbf40affb4296ee3ae1eb9c6c289f78ef145829f4153bf2b4a1182cdfed0558a8694459b1bf", 0x46}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f0000000240)="94fea6ec2a4c6b8654a684750b9060c4e3828392ce2f1762280c354f40d81ca600cd0a79ed7f8a1715c7a0574a4894e3915684b8d27677df0141ab89fdfa83337037feb816b236c6200660a162f8c41a45b4bb139a8c10d31300f9ca1d8eb3d9639837e2931ee34e5a5f157e27ffeeffbef345b72b75a2b90c232de1bce1d806ef8bfb5c1a087e6e93864311b4462920996210eb6dc46f21f68e3a24c4d9a588889c200fe2f2be0f7012ed9e7b0f94af35fb603f8ae0", 0xb6}, {&(0x7f0000000300)="85816a4dc8dcb6630bd9b39b96edc114efb3fe4934fc0705201b6d7fc220f9b21c76708352432431887ce4c7dd89d9eb330d8793d298750f2feaa76c08815eff2b", 0x41}, {&(0x7f0000002200)="44b4fa942d046afda13e8fdc94088b1c673404e26cfd763b7c9da2951d73a76cee6653d09e4a9c5767c59e03ff1b67c8819ece0a40a968b6259993e7f1bb0eb5ad1400c45617215603c83af32e4f19d092d5c1f3a682a257071d483d34e1b4d3d97a53d1cdcc319c374cc05679055430b6b5daa0d208f7182e24168c3f3e82defae802b1a02188e14f5c9d0951ed99a17dcedf80249048eef5df2bc4245443c19811cfd6b5e045633d83fa3eae5806259dbb68dcb398ab1171bc1e75cd882e82406e697712edd75f79e16f33cc7e4ae6416c5a1246640ed6035df9b4e49af31ba26c71bf018b981f61e69b888a5b00782c06c365abb8aac766f2734f5e71350b5d34f04eccd5c1fbd3196e7afedff1fddd17bbe4020f1eca79aedafbd0bd8949f58c4b1938a4240368a5b922ff63964d75318d578b6cc98599ecfeef46f49a773c7894325da5db54ba866db07f8f669bcc5c3d072a46727c3dd01a90b694cc6fe54869c09992acefc28e71efc1a9ec44339e5ed5545f9b61b49a74cd8cc8452d4d5cb5a7aa4cf576a3463ade2d9688ca73dd79583658f4fe582f5ddfb4daea9425b03e177edda6fa25bb003124c5b73c85b2568492c87bd2741197fb37787694d9761f0114952bcaf4bf177d8a4cb02e70402c5cbdca194c0133ee9360ad3a2bbf475be50ea27f175472f17ff7f64e3a45c305d4cfedf85c8e82dc2ac3ae1fd91eb58f6085bb9b9c857663863dfcec449f0c6aecae0c5fa268385bf4fb682cb9da937bc6beb6aab4b83bc3c9afcf06bd46fd926b34a624e6236258d6996fe7e8919a6315d36f33a70e72d731fdce876c10b287c31c0511e4d6198598d516f4aa4fc6f06a0b954414bbcdacaf9841b133a4ea2bd6be10ce288d65248e636916dbab866efd20f1b70226539d74e9f491c7cb1b66f55112021b10372e2b993c4c36de73a2cf7058aef7c693238c2eceab7c69e7a4e5992135ae176ef93412d99890b7d8842351c465b21e346810008ca92c4ab417f2090bae5aee0b4c56bc0d2aaa1672f1cc7e45ab69a99e3c3f80fa4fb7f99fc88075569174f7803615d43bb7e64b149abbb4145036e089c18b82c9d4bd95869142f830cc0c59a3eb300e6b7e2db209847dda866bd983d76c2772464f6e2634a6c12acd8cae12b1efa863a2eaa929b7bd93f7cdc585cdbeebe33199e814ee54ff0fce7d369a9981c135a332d9e4a100015498dd00e5fe44938378c614d1c20aabf2792a5fbec295c87d6c218ba7c0f003647be21337ce468723f2f9b68b0c38def969e97650ef2543e468836bcd3f604dc39a2d67bda17de8adbb00d718921b7bcd16e3d5ecc7e123d921fa3e91c5d3a73d784510f83c895dbadeff1dcb2e15aed883ec251a4d9302f4d945b9f688ff5cc13efe8151a028e979ed45d79d8890cb282472440499077df11a6a8e746738b6465d1c51b630f7b15bda8b773d99a1982c832fe7c4487885f803f95eae34b587a5d724fac1cc7021767dbe9aef6dde654148f4d26c0d716acdd5ac720eb5811ab563a9e4e1210331e69eb2dc2f6c2f8b8c81f02a5408a9e8ae92517307c97db584ca691abc10fc08ff32907679f10cedaf60f880691e59388feca480ee653dd169a824df18f9865f774c72dfd2a4525b380b9fc9369a271d2193d9e14725704eb1699d9185c3c65740b2eff07c80c7236ac8ac113dd72616bdc4afab27df838687625bf790b97490bb1bd22ee27bf1a9654d476d9d5d6017c123f4dbc9529d12ceca3aef4c6deb07ebe96b0d8411eff4aed4411a9288cf5483b53a7bb5112a603b80d36a0b97bc93acbfc6e7f75b0b1e506793cb6925292cc434731c2e151dc5eaf0e9e205f9b0898584ad25a8624ba790b0857ee9cc18c7dd83a768b1625faae487f45e7c0b4ab1ebc824636cad7d028f0cf51edb62571806215699284406ea40a1d1260adec9346b78670f098d5ac0adb59675735ffb2d166ab1bd2882768ac735cbd203418b80abd53c12a6220bfefc3635d3f1c9e82fc21a371c088a62e65305d12497f5850a4eba7ceed09c257f1c2f9f382a0785fcfa728bd4927c811bbc47c9910f826baa8e84d8816d328b75ffb1c219ba2681f2fcdda779eed27f562448617e3ce4e58409bada80e80130977cb8418bde71b0cf6f6f55384ce45eb38fdb3bffbb0f717d0f838d530dd18cf7761e55bf32ecbb95b4a7fd57acca03499696778b08f283e40ac4523e4b44c3f648d715032f99fca563cb3ea3aea7bf0ce58f32d71f11b692b4235a45f0412d87cf56ccf8f783893bcc555699cba564c460ac5dab4fd314b2f292999332c9dd336d6f88966f8363c13865d71543be150097d2af5842e48172aad405a02b07e7b7d2bc0838df75ac595557484ac8283cc162a61b17f4f4fbcfce75f767883716ee674330262d40de349da02e83b74e51aa49854a5c48270f842e8ae905c69e6a317cb5c732b068bbfa973305c6e6ab03f41e2490da134085f93e6fbc791e412eb861c412971963010617e39b22a6584fe2001a49c64ea5c8f1815f60d1b91408c87b3bec79d6e2262f42bf2eb4329157135ad215e678a67c77b086d5e0d29e746997dd0415e869094408ff9f1b91e85792c183c661701aa1e88fced8c3b59d9c6de127aac560ef663948ef9e10561ba16907a2c0d790b31736fb923d4df5d7c3b42bf378c6d179ffd8e766aec8a9508fc72456528e901f0ce946e58a80788e65a6b11d5098245bab5ef5523db6028ab1cc3fc61a85442a2697217abbb4f8462bcccd57c4f7794c0c01f1240e1fac8f225690396a3b05f6754aad04af3710120eff5fe0fbbdbb445425efe04811873c2932674888cb743be966d0d345abe9f2aaff2b54f881a3fb704814768bc503802881be33e9a98c9f6d50c093d16bbecbd76b12a05273cdd4a1c2640d34f24e3a30c51045cdfcfb418db4b41a409ce6bd0657c41cecd00cfa98795457ffc4b352f498b1f85c40facded13fee37f871dc17fd34a020fa4d321ea1157e40625a714502b481d2666d4d16c75bdd542ace1e21318885d62f2c44b49cbddf9e9ea18f821594aa37e80b8545d0a9c39a5f90c6d46d79e395a81278cc46fb484893928379b4b36e4f570aadbed60814f972ef8301281220bbf1209cd65f2ed771487595c0a8b792b0314ca8dfeff938ab841e989c390c618d0d9be68b8adaf8519f2f52613a6d10f383da23db7fffaf48074196ff4fcee7080684020943fbd191e0ed426b30ca6476bec759ecb3ebd0bde14fd1a6e90c5ee5916ea6bd30af1ef1689ba107521f15cfc9b9bdd58d04d4d12fb91b86cac7ad8787d64b73c24e7b9e12647eab2257b54f6ff1091f4d7e811d11d06e10a565cc49075a3fcd304f69a0525df6ca480ee93c95d499b136c71b7b6c039b0ddcc663596fc48fb00af34ec8a753d38f66dea9e43da9940c3f952b3d9bc888c62b8374eb967e9c298660a3b5436e264ff085b659bca9cc974533d8d473ed7c4a47c72e0a9555f1015354f205fee4999991924e3e24fc6200460852ac50a5e1c10367ff1f1d58dca66e565425261917851e7e618a761f9ca51fe933a0591815bccc4c422a75d984e9bac5137ab83feca3b33c209f5c49267b7b5b979cd1654fff380646b3ee53882a0bc63cb2a8aa31f70fec930295f0c5fb5810ea126279cc80fd501ed1ab8e0ef0247b0965f9a37baebd3f402a4ecb84e1d0df82d65cb19f1eade7a73d69afb81d9084e73d6d59e2e63c889456e1d14114d9497c806c4f1b7d8b62140079731eb5e7779a5aa04fb6975ee123331923ed6b0b4c9758971334490ba89d76e4fd532b9185152778d0f7c2513b1938eb434d6d597498ac371f862374a0b6a096fec86dacc3844b2ef5228efec9998467e27cc86d30b92cd41d15cb1217786d6a69b0febe15a6e14dd0380765bd9fd72aa29ebd5031f0a3c5fced84ff020409aceedbd3a06831c732dc81ca602a8b992523986af1dfce965a3b3114c5e3e811bfe92f75aa42cce0026725e8b6dab687f0873378233471c0c141366af36179a0ae7c7c40c640628941c4daf6ee1e43a2abcf597effc3c310a78092bb6d943746be50c4c8ddb26163b3af2ccfe9025e5604b39c6c096142c87d3ef0cbe29b6e35c5888e81b3e83ae52c0d467d8ca131ddba3748abbacc48ca03bbd6716f0c68ab096497bfa986eab9bd15be56a0b0f80d67fe1c909a22923707d6f19d281d8420932b008dacc314eafa2de9ce226ded4c8530bfff24b84ee04eca030f4562230958f79277bbbbf95070a7ac7ca9cbfba606fe75e093d94332b9c6a6538ada993655b6dc251df3f73411ec3cee0ab55bc0b369762117793cb5b4af26d9819e2510ef2634ebcfe3e5cd7af3d4d2a704121d1e21e9658dfcff2d85f4383940a5f9d3d0cd3d91de8769a7d9d8c654d964fbefb03b219c3a09e0bba15771a7333038c97c30b91434034e7b40942455f79e33939fd4dc4024754f42c9039e54d63fb63cb98ced98323623fb62bf25f0b885ae04268b73d692ae0a9d6ee88e43cdab72ed6bb9277d26b432327d8f5a83b0af36b7669e46789f3c5d376b4c346c4e47fe51ad200bad15715fff80eacd3e25bc7465f1d43fe9d72953712a159b7530366e56cfa3e6a766cf02ef3ff55161e068954c2d46529dc453048063a4f0a8254732e0a35a1a1765b8f0cc03a198f79ea4038479a3243599a6a02e53980fb18eb155f2cf8bd722f4abc46bbae72e25932b229d036beea21c7910b9da90bef6fa2f618c86cf10a78b24ee3cfdbdfb9de6e08d14867f8a8dc3cf3b2f94c76dc556ed7e98de9c1ec2047bd123983311e1c1cec95ded04abaaf3f2a9a8b681a8fa39efbff37ccf4a7682f15551a9eeec453f9cc7b6c3ecf510dca3f6e53ca92a296232364c80a2dc4a26f5374c6239df7c52014e2eacb5282740e9c4d9b3004ac827e7f5e5083b67242b009010e6981c1d7e9cadf315398c051e5849dd3e71b6afc983f249fe8065f3d2021e7f7e708328267214289e184f9173af99169b0676b06e5913aea0c4f5fc14bf0cc1a6220b91691d44aadebfeab43a07eff8a2f54ec11512c496af8a20d0f8ae919a4c4d66321f6c0ddb237f7afbdb338c0325bde67387c6247b8495e3aa5e15c98161770d58c2f5c5787b0cbfa480de67a803941186688016d2db52949881baf34d1bd1a5687ab2be21f254cd364b412185c2cf0ca37ff6efb87421f06b9ed9c0249c8b545ffe5bfcce156624d873821eeb55e2283cfb29609883f18ec398364bd0cdf2fdf38e6e21f677a23f065407b0d893d3e112ac8acaca6f65d96c3a9f65157de76632566b8b95b9d47b8b997a43591474fce25d24d9578ff2c1be4b4253ac8c64727f25679818c56266f891dcaf7d680cb440c3995f7fd1b5856655a5e20695f59a276fa5008a3cf73d853871f6781dda8e49d9576ef1caea6d00359a0760e36023647d9988c67adf6407fa5c2fcbbfe7c2a6788dc2cd8f1a16e1caee12cc08871fc6ec2d0241b1d733b7fd62a63d36522f22aff5d668c29514255d819a7b49ac9ba03a7c149075ff982e4f31e956e52b932419d0a57dbdd977b1d20facdc7cf0e4afcea283e31462c40cd4af939ab55b824e7f5fd8839d360db00d61cf1ca951700f2d784df7180e8f4292c365e0982bb844e0fcf6f08296744372252b590bb5c5b2e165e8b7df0b00cd6ed4382b9726d1a022165f0855045b0e7ceedbfd4800ca2c7f14eb9d448503ae5242378045a68de4a15bb418cba1bc8dfdd92901b7477", 0x1000}, {&(0x7f0000000380)="1c80c3509ecc6502a8f9516e0bdc21f658a18b5941b6885c892dd0029f7fce6875", 0x21}], 0x7, 0x0, 0x0, 0x800}, {&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000006c0)=[{&(0x7f00000004c0)="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", 0xfd}, {&(0x7f00000005c0)="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", 0xfd}], 0x2, &(0x7f0000000880)=[@rights={{0x20, 0x1, 0x1, [r1, r1, r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r1, r0, r1, r1, r1, r2]}}, @rights={{0x18, 0x1, 0x1, [r0, r1]}}, @rights={{0x18, 0x1, 0x1, [r2, r0]}}, @rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x10}}], 0xd8, 0x48800}], 0x2, 0x5) close(r0) 17:06:53 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/mcfilter\x00') getsockopt$inet_mreqsrc(r3, 0x0, 0x26, &(0x7f0000000080)={@initdev, @multicast1, @remote}, &(0x7f00000000c0)=0xc) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) setsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000000140)=0x3, 0x4) ioctl$TIOCGRS485(r1, 0x542e, &(0x7f0000000000)) 17:06:53 executing program 2: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_ADD(r1, 0x4c80, r2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x9) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1393.214017] binder: 11364:11366 unknown command 1208247068 [ 1393.228954] binder: 11364:11366 ioctl c0306201 20012000 returned -22 [ 1393.247451] binder: 11364:11366 unknown command 0 [ 1393.255990] binder: 11364:11366 ioctl c0306201 2000dfd0 returned -22 [ 1393.276633] binder: 11364:11366 ioctl 4c04 20000180 returned -22 [ 1393.279360] binder: 11370:11371 BC_INCREFS_DONE u0000000000000002 no match [ 1393.279366] binder: 11370:11371 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1393.279373] binder: 11370:11371 got reply transaction with no transaction stack [ 1393.279381] binder: 11370:11371 transaction failed 29201/-71, size 120-24 line 2921 [ 1393.279527] binder: undelivered TRANSACTION_ERROR: 29201 [ 1393.280393] binder: 11370:11383 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1393.280898] binder: 11370:11371 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1393.281006] binder: 11370:11371 BC_INCREFS_DONE u0000000000000002 no match [ 1393.281012] binder: 11370:11371 BC_DEAD_BINDER_DONE 0000000000000000 not found [ 1393.281018] binder: 11370:11371 got reply transaction with no transaction stack [ 1393.281024] binder: 11370:11371 transaction failed 29201/-71, size 120-24 line 2921 [ 1393.281086] binder: undelivered TRANSACTION_ERROR: 29201 [ 1393.379939] binder: 11364:11366 unknown command 0 [ 1393.385153] binder: 11364:11394 ioctl 4c04 20000180 returned -22 [ 1393.391467] binder: 11364:11366 ioctl c0306201 2000dfd0 returned -22 17:06:56 executing program 4: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x4) r2 = getpid() fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x1, 0x3, 0x200, 0x6, r2}) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) 17:06:56 executing program 5: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = openat$null(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/null\x00', 0x200, 0x0) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f00000000c0)) inotify_add_watch(r1, &(0x7f0000000240)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x9, 0x0, 0x2, 0x6, 0xd496}) bind$unix(r0, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) write(r2, &(0x7f0000000280)="b336379c85a411f002df26d72b3699f6fb17db6b8de3922e4b8489d408e5d9311f1aa513fb36904a1dc1a49edb38fced66f89f5a9e5fe9a5b81dcf7283d7d55f917db2213f2d19d9fa407f2d5f2077b11a53b496196b4bfeadb8feda89d35cf622c14396a958bbc886c36e1b97eef086233df528cc86d4fa0961ac93881ea0ab1f25be823468041cdae2b5f9c9e3d5733f94f430bb3b1abd87536e3d6641c77339804bf9d170dd5f0647f4b76f5cc4296916f456624efb25a0b0317cca2a7670e935f37f", 0xc4) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vga_arbiter\x00', 0xe0000, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r2, 0x29, 0xd3, &(0x7f0000000140)={{0xa, 0x4e22, 0x10001, @dev={0xfe, 0x80, [], 0x26}, 0xb7}, {0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8000}, 0x8, [0x3, 0x68, 0x0, 0x7, 0x5, 0x5, 0xfffffffffffffff9, 0xae5c]}, 0x5c) ioctl$TIOCSCTTY(r2, 0x540e, 0x3) 17:06:56 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r3 = fcntl$dupfd(r0, 0x406, r0) ioctl$void(r1, 0x5451) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "4feae654c5107f11", "a8fabe6148c8f88541c12232499fed7b", "a52f4e60", "5e3b6acca37cbd76"}, 0x28) prctl$PR_SET_FP_MODE(0x2d, 0x3) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x8) 17:06:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) write$binfmt_elf64(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x1, 0x10001, 0xffff, 0x8, 0x7, 0x3, 0x3e, 0x9, 0x2da, 0x40, 0x33d, 0x0, 0x3, 0x38, 0x1, 0x81, 0x3c, 0x2}, [{0x7, 0x40, 0x7fff, 0x3, 0x401, 0x8, 0xcc1b, 0x8}, {0x70000006, 0x3, 0x0, 0x9, 0x5, 0x2, 0x8, 0x8}], "8c9215bfccc634b6659bfdab11da0fc85ec580f2bf883f2aeb01c0e735e992288777e5caafac4ec32acb7f39a2a310820656ffd029da1d0b367ebb5e4436c331a3398816f1874768ed3bc57da2ba01893c4bd08fba2247d316ed102baad42307f502c3b473c7f3cafd425b9af48cca2260aecb064361639257c0509003c3888b9990d6212aeab20d180b0203b003d51a8918a430b74168ea166ad2bda3f9f00a5bd477c041bcb6050354a347c3a8fd05afbe8774603acdf6c4024bce1cba17c3ef6e9bd378978a3f38dd25746db964c75d72ce80e31c513c216ed09ed36278f5", [[], [], [], [], []]}, 0x690) 17:06:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000001c0)="0adc1f123c123f319bc070") clone(0x20040200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x2) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) gettid() ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000240)=ANY=[@ANYBLOB="000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000003000000010000000000000003000000000000000100000000000000060000000000000000000000000000000000000000000000000000000000000003000000e90000000300000000000000000000000000000009000000000000003f0000000000000000000000000000000000000000000000000000000000000000000000000000000000008000"/256]) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc)) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_RX_RING(r2, 0x10e, 0x6, &(0x7f00000000c0)={0x9, 0x7, 0xfffffffffffffe01, 0x100000000}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) tkill(r1, 0x1000000000012) open$dir(&(0x7f0000000200)='./file0\x00', 0x27e, 0x0) 17:06:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:56 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) openat$rtc(0xffffffffffffff9c, 0x0, 0x800000000000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) getresuid(0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="73797052de0e20f96383870dc09039c0b3eb9f9797d28017c9a41037b317c536ce763723e36479700000000000"], 0x2d) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@buf={0x27, &(0x7f00000003c0)="ad533be3ad65aed62e63c49951895af0a36f02b6e0de160a1a5e31d5b15415332b5ad1dc3a2217"}) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3e}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f00000000c0)={0x9, 0x0, 0xfffffffffffffff8}) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r6, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendfile(r2, r5, &(0x7f0000000140), 0x8fff) 17:06:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = socket(0xc, 0xa, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000100)=0xc) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:56 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/131) tkill(r0, 0x34) [ 1395.415001] binder: undelivered death notification, 0000000000000000 [ 1395.429875] binder: undelivered death notification, 0000000000000000 17:06:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKROTATIONAL(r2, 0x127e, &(0x7f0000000140)) write$P9_RLERRORu(r2, &(0x7f0000000280)={0x1a, 0x7, 0x2, {{0xd, '/dev/binder#\x00'}, 0x9}}, 0x1a) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xfffffffffffffea2, 0x0, &(0x7f00000000c0)=[@increfs_done], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r3 = dup(r1) ioctl$TUNGETFILTER(r3, 0x801054db, &(0x7f0000000180)=""/219) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1395.470428] binder: undelivered death notification, 0000000000000000 [ 1395.500782] binder: 11441:11442 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1395.504569] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11425 comm=syz-executor.5 17:06:56 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)=0x0) tkill(r2, 0x3c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:56 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) ptrace$peekuser(0x3, r0, 0x200) [ 1395.507202] binder: undelivered death notification, 0000000000000000 [ 1395.531291] binder: 11441:11442 ioctl 801054db 20000180 returned -22 [ 1395.540440] binder: 11441:11442 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1395.552908] binder: 11441:11442 unknown command 0 [ 1395.558458] binder: 11441:11442 ioctl c0306201 20008fd0 returned -22 17:06:56 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000000)) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x19050, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$UI_SET_KEYBIT(r0, 0x40045565, 0x2db) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xfd6a, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e630c4000000000a79febb830591704b17649e95b1b5186d6c99e078bc667a88374e84577ee700647f77b49d3c0d63d7654bb8deae024d7b66fa56621881a913d9dcccae1a317e6e81bffa2a732b009f378208d0a4dc68f87fbb7ee3dcda6710736f5"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1395.571957] binder: 11441:11457 ioctl 801054db 20000180 returned -22 [ 1395.595045] binder: 11462:11463 ioctl 40045565 2db returned -22 [ 1395.603570] binder: undelivered death notification, 0000000000000000 [ 1395.612184] binder: 11462:11463 ioctl 40045565 2db returned -22 17:06:56 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000080)={r2, 0x1d, 0x15}, &(0x7f00000000c0)={'enc=', 'oaep', ' hash=', {'xcbc-aes-ce\x00'}}, &(0x7f0000000140)="a631ff6f4dd7529a934cdee77b7de441779494ea0a7bde2a2b704ef17a", &(0x7f0000000180)=""/21) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:56 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)}, 0xffffffffffffffff) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000080)=0xc) ioctl$sock_ifreq(r0, 0x89b0, &(0x7f0000000180)={'sit0\x00', @ifru_flags}) 17:06:56 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x10000000000400) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x264c03, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000240)=0x7) fgetxattr(r1, &(0x7f0000000000)=@known='trusted.syz\x00', &(0x7f0000000140)=""/224, 0xe0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') pipe2(&(0x7f00000000c0)={0xffffffffffffffff}, 0x4000) write$P9_RATTACH(r3, &(0x7f0000000040)={0x14, 0x69, 0x1, {0x10, 0x3, 0x8}}, 0x14) close(r0) [ 1395.636111] binder: 11471:11472 unknown command 0 [ 1395.653056] binder: 11471:11472 ioctl c0306201 20012000 returned -22 [ 1395.670132] binder: 11471:11472 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 04175930b8eb9fa7 != 0000000000000000 [ 1395.695815] binder: 11471:11490 unknown command 0 [ 1395.704359] binder: 11471:11490 ioctl c0306201 20012000 returned -22 [ 1395.705708] binder: 11479:11491 ioctl 8904 20000100 returned -22 [ 1395.756849] binder: 11479:11491 ioctl 8904 20000100 returned -22 [ 1396.346749] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11469 comm=syz-executor.5 17:06:57 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/policy\x00', 0x0, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r1) openat$rtc(0xffffffffffffff9c, 0x0, 0x800000000000, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x40000141042, 0x0) getresuid(0x0, 0x0, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0x323) r3 = creat(&(0x7f0000000380)='./bus\x00', 0x0) r4 = getpid() sched_setscheduler(r4, 0x5, &(0x7f0000000040)) r5 = open(&(0x7f0000000240)='./bus\x00', 0x141042, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="73797052de0e20f96383870dc09039c0b3eb9f9797d28017c9a41037b317c536ce763723e36479700000000000"], 0x2d) r6 = socket(0x10, 0x80002, 0x0) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f00000002c0)=@buf={0x27, &(0x7f00000003c0)="ad533be3ad65aed62e63c49951895af0a36f02b6e0de160a1a5e31d5b15415332b5ad1dc3a2217"}) bind$netlink(r6, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r6, &(0x7f0000000140)="2600000022004701050000000000000005006d20002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) sendmsg$FOU_CMD_GET(r3, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @multicast1}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e20}, @FOU_ATTR_PEER_V6={0x14, 0x9, @ipv4={[], [], @loopback}}, @FOU_ATTR_PEER_V6={0x14, 0x9, @loopback}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x3e}, @FOU_ATTR_TYPE={0x8, 0x4, 0x2}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$PIO_UNIMAPCLR(r3, 0x4b68, &(0x7f00000000c0)={0x9, 0x0, 0xfffffffffffffff8}) connect$netlink(r6, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) sendto(r6, &(0x7f0000000340), 0xac, 0x0, 0x0, 0x0) setsockopt$sock_void(r0, 0x1, 0x24, 0x0, 0x0) recvmmsg(r6, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) sendfile(r2, r5, &(0x7f0000000140), 0x8fff) 17:06:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = eventfd2(0x0, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) read$eventfd(r1, &(0x7f00000006c0), 0xfffffea1) dup3(r2, r1, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x12}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x16) prctl$PR_SET_PTRACER(0x59616d61, r3) 17:06:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/status\x00', 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r1, &(0x7f0000000180)="286b46d1d0184b68d1796a5d36f2422a6711ade374a136e78de5584e1b5a5583a2089162a1e01919c2f3c3becbc9e039e4ecf352fe1574fe3a6baa645f93a11c541de884099e06af4a89d893f2a9d51b361bac19d1860d8b381a679f2ffa071c34fec2752f872c055708794f6e4b3a0288db0033f6a9f4"}, 0x10) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:57 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000c40)={0x59e, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) finit_module(r1, &(0x7f00000000c0)='/dev/binder#\x00', 0x1) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000340)=0x0) r4 = geteuid() lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = fcntl$getown(r1, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000440)={{{@in=@remote, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) stat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r2, &(0x7f0000006440)=[{&(0x7f0000000c80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000004300)=[{&(0x7f0000000d00)="aa4ac81f2ca42f86138e8029f2b780d1ed15e26f56e5d7d55b6ccd9f2178978fc8752951b76834383ce10a05a2781ce801f1d5771c7ff42fd79e080f391e7212372a48120b9a02d5cc781a5b7df71c7c94abb70d53eba64d69d3cfb658925c9edf6fb1dfd213b38c283ef2d193d8bf45ca16902c6171d62624e34aa4c59df615edc8f467de8bf1e8132ee14e1ed9d0e83d6d5cb680216a9130af074ac44955ec5d", 0xa1}, {&(0x7f0000000dc0)="0b7b2800cf754e13063a4d1f63695c9e91411ed99dabc4942f8a57a521c8cebe8784173474181a590c6a530ccf1e302c9381f3bd12e7f21c62f4d79a0962d4d5c5bc3afa60ab0e96a3cd3ca46ac96162bb0c8c235fe06c5f6b314f18ca3d05118c3abdd76cf1dd245ad522805d880a2fd07ee4bf7d76167247605f6d8dda3d77679a2db934c2c961e4285e3630945284422159cb00fb572cb7059fde5a6cb9aa16c49f", 0xa3}, {&(0x7f0000002040)="0038374e57b486fb68bcaf62bb5f3714bee39e3c7386eb587ea2b9da813ce6a94fc4c5f26ebba0dc69c2a4f90d53d8f12229f3bf7bdbfa2acdef5252c2fe06603df0b563245d69bc31a4bd35660c2876b9c1b2ea5082c2d0341cfa373c526e23b13f910ed03c8050afa27fef5faa945f9547cbf3b2e23be0b015ba6da3871cebef74a0d77ace173f70f2f8c8d81d082d1e317c254c8f5cf764362c6f64741b8c7b3fb998808eca3e9d5cd29bc935eea3656a1b29b04d6679a73d960b4485e888607bdd5f69d89b72be27d2f839e1486e256a0954d91888751613a46958c416598a677f795c7e928fc3d670ba57fe32b0dc1868af601a513009b565c9480378e53a5e400b8dd1f15c2282ec12895e0ff16ebac04eef01ff4f1a9460dee9cfeeb83db19a1e0d609bcec7d58791afdca9b449713d5c823730ca2e202ad8324a34e3f7c4a110a77dcdd0a2ea6e47819a9c0f6f770f27765c88b2cf3c3ec00b338542d236b9cf66e52d79de8708a185a5253eda0ad2edacafac323081b6337c87e98730291f8a387cf8cc0d12869194c76a678fb51297ec68970ca64e7de9b1ec4ce97c3d0b4d0d8afdb8aee4579700952323d63f890e85de0aeae2a9d8fb9b99ab3db66ca4684814b7c217387fb4e5e131ac1d8f0534048aa1693146acea2cadf963c732d55d60a937b8a1a99497276bab0876ed5b571366e066658892aab4b7a940467fe6a453cae3b393c4c1f2eca7e4e544a58f9024580ef66eaebca9eaf64fec16c98fe2cf4d89097feb13449d6645042a8411fa8c9b3bd9452f70b54ae49e72162d999b93b2cb834e714284a333458b10aeca41ef02e9867ab8ae0ef9beab9c47a7c566dcfc57f06e7e9ffa204347432570722d55523dac1c986189dd6b4f75029ffd40a94d8c15f4d47bc48655790bb024e89a6633a7c6bb5f64498f9a27a857441836f45525c8b06484e3f6d96305ab2e285bcfcf5b31d4a91c94e96fb8d562674d594b062eb98d619837a630f84084825f564a84f468d8d2a6223c01cc2021bd677f031cca115c2a0f850734db1894445721edbca19cefce19f90b42f726482f85dce6dea57ec338245ce0a35b0fab61a996f2b9448bf02ad00678d53044602105f968bfcbcd1e40a7f58a336475571f1d69fb57c29f1c23546c08b4c0d06caafe6e791f2bfeafb5eac7b37d947a8b7fdcf9b6e5e3d538b43b8a881c187fe950ba5712e05f0b0867cb376c09af1a5707f5b567db4b7285ce5d88ca0efc84f4c08f808df0210582a4291165862098e63ffb7f78d917ba361facad0eba3870cf5235901733034ab029a6e6e42ca9971f666c8e937d08f405ef2490167b1c353b65fd8e41fd4939b9dc4aa13a0ead93e03455fa08f7385e3b439515be8fb72969a30c98d34350027a5f633ae9a6685bd5335553e89a287060d913c072531e5755a09164abea754f8147651a8e2f66ce66d13d0abaf0c887279b33c0f58ce0127b4fcaf2aaa97c5cc46fdeb5e7a9814dd465560a830a29fc14cb2ad4a284962ca72c7d7e1233106449b1ba7bd7b4bc36bdc70211d55985908742609e7f5dbedbfa722430c499987799faa727326c015c2579e0dfb021d7cdbac411b62dbcf5c6e3e7eac402f1e5cb5d9913fbef0f13270906bb1b1cc9ca6634f25a74f504f936c680db8f32445c662c78a450e05446481f9a94249301ba7e025e37a0a490c8f13ee4cc488bea6e7673a4ea44d45ebf42a6ae9253e17ea966d11a66270d8984af33dd75fe48940d2d32b6081c6a389a684e523e73cb7b090c61dfa9f2d4114ebf9fee6a4aa90d62d9d4e4bd0a9ad559c9867dfc6034061c4af89ddb4e894704c836b42a8910e8aa56e9c0d2d9f0eecd6494dba615779f11542e6a921bb6b4caa20b3be559264d1c8526235032097d9c2b71ff4e6a3ab3cfff3262aac6becedb056543a3e8f07ad848c8ac9e4142da6c693da40816ea092589a16a011ffc63b0627e2a72499e7beff60e61ba9cea92314de60050e51cc49101eeb2051cafafdf7fd10775343a47c87a1c1eb90ef18a7e84b6a37a91741619951a67032c6cf9d33099daf1a605f30dc2e6ce96a4a954aa20f8349a3423d75cf444d02cb452d0e3b403352f204402832b0afa2bcbae2e226aef2e5deed8604f434ddf6417d7a3a86abb83e356a7cfc5b93508c58d1e7ea96e260b7dfdc7b10267c9f875d485b60b942e840c3d5e7e40d527423f155d36dbe4fd8bae33804946e69a7ed59168a8183708a1747a58c8a18cb491a57cc11f0fa0d6618ecef34fbe7c5f3ae4c28627d5f1cc0264fa55b0035147987c39f5249d41d6a34d5ed9b902ffe4fc6c93ce22ece8b90796b3c06666e9f9801fe8c87eb185c8d434f654c77804c139355c2081bfd97a637f63192d29dab3a92ddcd06be59d46d4194a8ec0d84fbc7dbd396bb06579f6dad33e2b0c8db390c18f36996e56f8aa7ab9a2c8ddc1c887f785c3609f1a8e08e3f99c2608a2b98d57cb1bc465f8ecbbbe504be90e69b81e646f21cfa764e8eacbbe8f3235c67cbcf12f456b1decc7044fa87658614dc8186da86a1de76fe853f25408e73627750bb33d493244f8b143c1d7eebc08e411f08d6a4d9fe2e60ec2738af6c88d76799da29b40c90310668946143ff661d4036c5d847a8d10dfaf8e40ab38dc552993611c447e98dff15b6fc863980172fbfbef22e70581faedd3f5012c5e46840febbfb6d55d829b8780c3601c0e52d1bb94548b9bd69d9321bcc0ad2d5b44704d9e27116c3fdabcac30d9c8cdb917e92d5c3d5e6fecabac704ae0eabc09c56609a1fb5abfff13d819a31dfff0bd4851952f1d91e08c994ad0d4231cc3571db8d3cf2941936f5692ec008f59c91561b70a906b92747acaa4e5c9f330f38b93b18886d7d87260ab4e2c1b8b645d32a64ccae0e3c01e9c3f3e4d85a2f6f5ae6a65233397ae1152bec808681ced2677df442a6c4537688f1a15f9fbe672e11bf04033ee0c1c59187bc24dd63d1f61625718d1c35802b972e3726ecbe96d9dbb0fbc1b090b32eaa3f8377f05bb0b3d73e9debcf28bd6f0ca35a37420df7c06c1164148233e2f38453b5cdfea5fa435ada88d6aa96a95483e069ad28f2137db75d6f45e6f26f9075df6ad33f71e4f7b20aa02ecacd90cd4f266b0ae79323dc3236a1b3a74f4b998651049ed47ee2e4996c2c766ed9d68ee8d22ffc0d3aab4b2b024ae3a8faf3d7aa90a4acf98a95713171f96bc94095f9eb3f0156c66630ebce2438a92bd39996f44e6af412b9d0d7b814b6c0145039411de1010c723f55fa3893e33005aa272f6b80a9537f7005b99be8b2b2dab2b1c7272f2d957104b158a4c8081feb7c411532cf51202b4ba37beca2a5af852537b3d29c0e0aa38a1fbaf94971d948db58747248fcf3a731b92e3f51c5c843377b49c088b681fd2f70f1325a91153c8a6c920230f2d54b7e1b66ac2c9fa5338b0a97cd827226ba15ee99bfd3a1e06074b05d5124216005cd63677d1d6aaf7cacdab74956ed55dc238c9875776d4954dc81e8b6cd2570b1e4296d5c49566162997dcbe1960fe1ce3491a8d901ad1b326a373c67128a9808433c7c20582e0438e1a4b14173c2c079046d6b257876d35e4a6759e796f9d45452f31c8d4cb70e6cf1ca9851bf157fa22165a1641e7550dfda0c29425b62ab4e523e61decdad4631eec83ff8f02db6a5a14c4b3b7765ffa57edbe8bc804dfd9e669142beb048a126a4a388b1dd1dadcf5e5adc2527cb2e0cf2ac5dce877edfb369dff2d55e162fe774ed3238663dc55dc6a11404d5a40901ce189065bd193d03bbf1e87f36ad37d99000e593a3808293b2ac2d25b02fde960540ac1f89a74f8a8c0bf4cf2150be25f090577b985b0e2eac973f1868df1b402fcb74e6dccedda18cd753d703633c62123b9e8c0104777eb9a4858ec06dd895558cf21fa763fe87b887ec8351d847a1dbbecb1cc0bfa39a2bb0f3d98fae0506a8822a90ac4702325dfc2f75d5a74190ef07a6805291d167882f25533ef05e5db88b40f9665de9ee8505ff0d8084e42ab668e4fb62476fe5e99d696419a1463135b662c09dad27413b127dcd34d32f303b78c717bdd70463df426f66e7696484b03ba7d72cd12067a03602e0ebe7ef7e3643ca4edf93f10f09540886c89e1bda0ea448b2e1c9ad4563703cfcc7988ecbb3854fcf93428a41b50496b0775688b42ab533b4e4d3abce472e88dfcb5fb503cdc913382d845ac9aa37054e30fa99997e651290689bf24fd7cad680ee312252bb699c0d9d5ecbfd128e19be6828afb6dea44dcf8ee65ff59a2040b22e75a1639fed5a8491de1e04664237b0254248cc62391fff3e30b570fd833e01342f1ab1d15fdb817df21325bef661a6d31efc1e22d7be73b5d353b580e58b7eb99062f7cb747ce6f9481c2e703deef0aaabb74e61e2c007760a5fa32265bdc1922dda37e5e707d6936e262bbea647f6440821699795606e11823b6756ebdfbc2df5d6664f589d66ec9c7351dd519a11663cc7c98a5f9615a18ad2434d7b22c6240ecffa923ead48e0a86f5e81aebba462b73dfd97ac41c00d80e0f0d307c356f9287d2d57a36710c292a30a191353a0aaf95cb7b02b87aaa6fd47b4999d1c535460e21e76b0ad88de3df9c8e0ebdfbc34f742f07b5bdf4926da5277fefb0d406b9ff24fb7c447e150018a0291b745f0d1fd0ba6a44c0cd42bd1589a106b016900e368396cb9b4a84a4c5f62083cab96e05f6f4a7d5636a8505b93a00d12cd750a0f811e59b163bf882d520d6a16744bdc8225b884cd94244ae7dfc4a65cb130d8f25d930d2cff80b729a48b64163f3d6fa72472ca0087a42da5908417de1c1d9d85a900714e15b30ff2f9b3868c4f0eac7c438ef1904203b4d67b0857dc5f2aa65a577e227f5b086d0160cbd0a6df4c777a3005b0f50f4af607e9aa60ff6be07781f779666eb3ffa711e4b043427ebac06dad3d690f8a83e1f30a43302c044f988a77830b7a6a674ea80c5118a223d4e1603ae0c2cf739f427b735d392de89744b3b2f675bb1b629bb11c178c95bb7496e4541cf4fb792cc4fbcfc1212a8701508700d96fc7742a5876ab02d115a94263aa8ce6ae8f5a2d444c8c372cdecd99d812b22ab41963d3f71c58b63e16d1359db9c65fc29780e2a5d812ec2dbac892c18de5c5a5df42260258fc4616ee1ce67321cebfdc1d2c3db16c9aa21e9227736c8a5905d29581f5a640cb5f7a8974ff2c99a3cbe82fc1cb8653b87aa9020af89f1f740f037e774b5bc0f4fb3646dd09d66d98c950e276d112ccb483319e68716a51b225ecb8dba2a91c239850b8e5afe898fb9f0ec6ccd581d2894bac12fe9ca096c3fc86066667205544d794da3d6a7c5053f1e291800bf220eb59cc3b7847d3b15acd2f60186437b1c9f4fbf4c24b5e82b15aa2b77b28e37ca1ff1f4ffca49d1411abc06c0c4bcf6805e8d474db320aad4eb0f4f7722b27902b449fed78fdb345c903a75c08286b3e056d230c9af2811b032d7683528abe598447b13b673cd59ff98e140a88d0e42fdab49373bbaa9fcd249a01a2a36e075af30cb128472dc9eb6b2b6980c5667a10dea2deba3907d2cbc4d65c193de25149e0c872480e8f0ebda7fd8d4bef49f8e86112911d5de78ab4d7f8cc97a2b2233b95ab47f777a60c240095e650732dfab74828a970dbc8189ed47c26746cf94849904b767cc6832591a96cdd2489ccc88b960fd7eb219b08e425c59cd81a2b4d9b5daca3f3f4e3b4d3ce76614d99fd1d52fccbf", 0x1000}, {&(0x7f0000000e80)="fc213b70bc23eab0e6c116c3af467d549dd45fc17b956b7224ad82cf5319dfabd024a418abb4aefee4ec9ab3604d8b463cc72304a2b6f6eb0c333e143f6b3b26a6dee268bc32aeb5aa3de8b4e9b1b93dfb6441188d891f5fe3bca6110ed6cb00e2129bcee799d375ddcb3e0fbdf2a850c3190a6845175dd0bd4b26dd4225a7", 0x7f}, {&(0x7f0000000f00)="6d219aac3be09a30657fb819c54012a84f678efbffd34feaa001eef537dac38c50d6a951e2e85121bc49ecd59a02f65607a7dc81ecda51b2f71bc9954ddfad7dad3dcb3029e249a955956bac0f438526194a711b86a133a13991ac4eb6bf31cc96d919c9ee0101071063f11d2d3b0ba7cf32934041365fc428693e3710dcb415d9d2f68d", 0x84}, {&(0x7f0000003040)="9d1e62e5a690cf2417439a3c49dd1441a8fb9bcf3ea07cde2c8d50aee762c48f4c413c908202aab43d646d79111b2104393a14010424330c4106422dbbb7b50d1ae8dad8f6f0b961bb8bb55ebdb8f130c6dd387335d56f25267aeb43053cad96aedb98060da114d1242c57d4a75e8f6b5d29cc570aa5c8fa97041ab8bc39104ac0ff6fdb19b582de0815a7965b2ec1937b8738af81c9ee51c2da27d0c423aab8e82e1b15a4690433c324321751def02a4fcc0681278f43fec8a0a8c106b7cc5001e2c22d4d08297d642f64", 0xcb}, {&(0x7f0000003140)="9183569383810f3d8c7041737f0b05f9abb5d2aec1b52d37a7aa0b4c6fadd8be8e8f88183974c7fba5e758275cfc0e6c6469181edde8b6b2719ff51f3837fdbf61963f1fa8faf2631159115f060183187298dbadb2039ba6d3d5f9c35b22f7832f4c48ad3ebb429cb339f79abd3afab4d0fab91404544052608148286c56075a888b3ce7a8e490", 0x87}, {&(0x7f0000003200)="9d2c47d8496e9eb3478a8d7ef08a724385e8f581af77605b187d2eb1e6b87239763dd80c83a6427c06118a1ae351e18f1e9ba7d0aea8464389d43fdb173f5b61c170d1d94510d8ff7c2f70e969bec45292db68b1ef2307665ff93df2e0a54c16ce910ccbeac7bbbc695e8af92978535c0931e6bf1fd7751776de25e8d5f8b4aeea85ca1012b822c1e9d64b9c464f4f35bfa9017b0ad8489655d49cb6ec07fb33fbe2f5c08fc010af4bd1050f0fc9f1fceeff03dde8e8bd166134e773359560ee4d33eb6960df080aebd58b550936e838725cd02288244c13d26c59", 0xdb}, {&(0x7f0000003300)="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", 0x1000}], 0x9, &(0x7f00000043c0)=[@rights={{0x38, 0x1, 0x1, [r2, r1, r1, r2, r2, r1, r2, r0, r2, r1]}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r0, r0, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}, @rights={{0x24, 0x1, 0x1, [r2, r0, r0, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r7, r5, r10}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r5, r6}}}], 0x110, 0x44}, {&(0x7f0000004500)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000004980)=[{&(0x7f0000000fc0)="b92c46d03230c86c4c14a4321d26bc7da3cd1d737ee433b40b97dc05", 0x1c}, {&(0x7f0000004580)="3b487cc7de02460c3d87cdc324263cfcfc163fc69de2a749f335935a429a410cfc56125efc28dcbbba60b246061b3272f3f3869b56270090757fd4d49c261e8e8586d2778dd4f2e73c5eec6cb1ff2afe633f5ff37021f455d10210ba912986900992dbb09b6c763163c6d81223b694e3e2b73e868df3e1360a0d85169cea28e082174aab0740dbdda6d2fed0348e2ff70b296849288a956faba471a68552fc51687bb3a120c62bc0e74120365237a32e2bc9110813f27883fb1850770b0c49ae7620d96397d84260a7d2c63329d6967ccbcdead52ce8a59bd708490e0182c7e5928153c181b275d0f27047850dc7ca46addbdc72d006b11707", 0xf9}, {&(0x7f0000004680)="f2225236", 0x4}, {&(0x7f00000046c0)="0e7a5d221f51eaac9ad4a395edc72c04bd729d51124a500258457a5dc89783762bb3cee2ad153999888ffff2e94b5dcade3e53877b56f51ecefd541cbce9a8c9afad104da894c0cef13cb8258bfedaadef056dadcee07dfd76eae1911d7554caf5dbe2eaac160eb12e9829156a3c10366ddd31a9c5cb7c0db24c27673c6ee6f2b10db1447d36b1eba0c9142ac025848746f70a1746513670ffb0e33b11ab1f4d43be3fe8d3400372c895dd1a5403afac0ab411dfa69655ff4e2c9cdf8563bd971388db239ae4f306f5675cf41c4b4f1e0204d35a3ff7d2d7a70360aaec3238b42fd57f48c7d07b24a623eba3fe830c", 0xef}, {&(0x7f00000047c0)="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", 0xfb}, {&(0x7f00000048c0)="dcba6beff46b4121a9f81f3c0b7a36ad7448279988e35677de102e101b5737a57e6f35d039c16cb769354426b80bbcfc184d0ef2a5b2c3e74595f859a330b57e0fd5a7b35d639fa8d08e2187c49a932ed29f9587b4cffeaf117be14405eb7fea74a1c2872374b06f8b733f5a28544fc5409b50b196ec5fc6717837bf798ed83814", 0x81}], 0x6, &(0x7f0000004a00)=[@rights={{0x38, 0x1, 0x1, [r2, r1, r0, r1, r2, r1, r2, r1, r0, r1]}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @rights={{0x24, 0x1, 0x1, [r1, r1, r0, r1, r2]}}, @rights={{0x14, 0x1, 0x1, [r2]}}, @rights={{0x34, 0x1, 0x1, [r1, r0, r2, r0, r2, r1, r2, r1, r2]}}, @rights={{0x18, 0x1, 0x1, [r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r5, r10}}}], 0x100}, {&(0x7f0000004b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004f00)=[{&(0x7f0000004b80)="ed152aab4037bef55cd639f36a6e6aa255fba7c2df6ba362d2da6a03b5293cc1d5c491d19931af4a081e274e509a8a2271c53a2dae9fb55f0a656028ce132fe262980085f91ae76c1b2e48f64ccb66f813263e1da210fcaff2953ae479849b3ac837d3c29d27690217a09d93f24e481b2e7fda4efcb30f7f13c552b4e11e2d0c0d83d771cd2d3f54317b4830621948f9a350e1f76784178c828dee33e4c72ce42b782a5f1807e452651cd1bb59bb975af7cef7dc22afcb40daa4f42ed10f960eea2143f2b05c1481b4e1fbd3f5375b1d1b", 0xd1}, {&(0x7f0000004c80)="c76a3a9e4506aa65fbb2f1151d1252986ac1791e366b42af02a19407035001e09ea960e11b94a01efff7fa265dc19fbe7e13dac6fa313febf83e9a417f625e5145c81b146d3ae7670385c6a148d46adc93182d0f193b0faf2a6e34f8beee129fc43ee372324eb420a8f4cb40a0819be1e00c035508daf481af93adc2113437960cadeae51b2daa2a3b51b7e6e288", 0x8e}, {0x0}, {&(0x7f0000004d40)="ac1f7e09793ea2d8eb0008d224733314c8c98918d4536cdc215442a81eadc1ee688599624ca45730d8ecdbba92a20f44ba862a6f04f3e389d42751d7fe2cabde5cd942f5d86f67ca268a5bd15015ee82b04f285cbe30fa478b42f951c095f4826ff567a784282802b10ed8c292515b249b000a0e035b9f6c786959e9d77fd629b3c0fa50", 0x84}, {&(0x7f0000004e00)="5a21676fe89e80b2a10d2909224d00649d4ee4f6805c07a1e0e3d66e84116303ce5d049ddd42fdae0ab8d0b1b8525f38f9c282e1e7861e75a6feba11b5d71b765eb4ec772dfdac4844f57138003a0f9b765eb7c0dabaedaeb76cdd1df4f40434d0af26f411ba5065e58b9cd49626a2ba659bd73be078cecaa346bc54201599a5f30de18a4ba76c492856868981bfa37b64adaf91da6b55227e1ce6f1d8696fdd8f4de78e7057be6320f8cee5c13060d3399270ed61b3ad8a7b5fe9cf21bbcf5adb9dfb656f790f295bd1f213276e5d0aa2925d5d1d6e787ef19a51ecbc4f0c7816750b1c474d73a47395", 0xea}], 0x5, &(0x7f0000004f80)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r10}}}, @cred={{0x1c, 0x1, 0x2, {r3, r8, r10}}}, @cred={{0x1c, 0x1, 0x2, {r3, r8, r10}}}], 0x60, 0x40}, {&(0x7f0000005000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000006240)=[{&(0x7f0000005080)="ba5615313970aff05814ec056476b1890d8b7cc73e1097bf25677b61b3e802dca3a37aaeb8a079644d8fd2017e3cf4ecfe5a2d71c6b390cd2b2bdfbcdbbf8e643cfce4fe358c2540e9df1080a3bb239a5f463ce14c66debf9a5842919639ac2dd774229bc1319eaa3895b06b9a11815d3a1e30cf83705063c1b829d3c26771c40e954bc7a8846d61976f", 0x8a}, {&(0x7f0000005140)="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", 0x1000}, {&(0x7f0000006140)="b113c019d0476b937cf883a2b3cf1156fceb9aeeb1987a21399550f79de20a5c3a807b7c8cd6ce00d131c76c6a1efd9c09e820a67ba52283eb3bbdf9b73f7217588745082d5da618ccd52ef7ae925d8b7af84e33b42950be974cbc9f2ed16f26de7a8f052d8a577224e8fbeed381fb3ae5a16cc14e52923f1072cf8f9b7d2142151b529b2f438b33ffbfd9a089f9980d94974344941d69df3acdb5073b7703f9eba8b3947a3ba884b898872bb429f63303e8d2bf119207da5cb2bc9339f0114fca28e6", 0xc3}], 0x3, &(0x7f0000006280)=[@rights={{0x28, 0x1, 0x1, [r1, r0, r0, r0, r2, r1]}}], 0x28, 0x4040000}, {&(0x7f00000062c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000006380)=[{&(0x7f0000006340)="7a493b3488aec06329b18b31705eded135d2ad726e332b524816499ecd52842abb84f9ab8269", 0x26}], 0x1, &(0x7f00000063c0)=[@rights={{0x34, 0x1, 0x1, [r1, r2, r1, r0, r2, r1, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r3, r9, r6}}}], 0x58, 0x800}], 0x5, 0x4004045) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000640)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000680)={{{@in6=@ipv4={[], [], @multicast2}, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @dev}}, 0x0, @in=@local}}, &(0x7f0000000780)=0xe8) getresgid(&(0x7f00000007c0), &(0x7f0000000800), &(0x7f0000000840)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000880)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@loopback, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f00000009c0)=0xe8) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000a00)={0x0, 0x0, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$unix(r2, &(0x7f0000000c00)={&(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000200)="6b241cd1700119a6d084b21f9adf106e64007b7aafdfc1a03d3a300318911fff0e7f5c2227935b75795f9769af23a995b68f55dd126ae5cd86d2ac920f949036bdb08f2992e8f217bd7d7c5c28879cb25d69286780fac3fd3f1ed7055fd837836d2dca4515839f49932fe627a54a32d9543a263f82c345ea3baaf46dda9c3891aae101df7b9f13cc30e71df6cec72e15e95d1eed4a68a41c1a510cfb9530455f715edc08afba341627a717612199e7201a354d220e64a4acd1a6202ce6ecfee5b23092e72e92a8bc6e2fdd376ac48d137676575c67e843e29388c9b91b495a4c5fa08a74066523836a26ae497e9e785696", 0xf1}, {&(0x7f0000001040)="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", 0x1000}], 0x2, &(0x7f0000000a80)=[@rights={{0x2c, 0x1, 0x1, [r0, r1, r1, r1, r0, r1, r1]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r6}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r7, r8, r10}}}, @rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r12, r13}}}, @rights={{0x1c, 0x1, 0x1, [r1, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r14, r15, r16}}}, @rights={{0x18, 0x1, 0x1, [r1, r1]}}, @rights={{0x28, 0x1, 0x1, [r0, r0, r1, r0, r1, r0]}}], 0x148, 0x20000044}, 0x4810) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:57 executing program 2: ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(0xffffffffffffffff) 17:06:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000300)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r3, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_SERVICE={0x20, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x2d, 0x6}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xbf}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000085}, 0x40000) ioctl$EVIOCGEFFECTS(r2, 0x80044584, &(0x7f00000000c0)=""/36) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r4 = fcntl$getown(r2, 0x9) get_robust_list(r4, &(0x7f0000000280)=&(0x7f0000000240)={&(0x7f0000000180)={&(0x7f0000000100)}, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)}}, &(0x7f00000002c0)=0x18) 17:06:57 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x400080) ioctl$TIOCCONS(r2, 0x541d) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1397.163652] binder: undelivered death notification, 0000000000000000 [ 1397.186167] binder: 11523:11524 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:57 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x210}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x148, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xffffffff}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8ee}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100000001}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0xaf}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@remote}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@empty}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x24, 0x8}}]}, @IPVS_CMD_ATTR_DAEMON={0x60, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'batadv0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="829e28a38aed5964b3d6c5b1a54d69ee"}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="2439703e9c784fa0bee7d2cb387ebe76"}]}]}, 0x148}, 0x1, 0x0, 0x0, 0xc010}, 0x10) 17:06:57 executing program 3: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044001000000"], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) r1 = open(&(0x7f00000000c0)='./file0\x00', 0xc400, 0x154) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1397.208497] binder: 11523:11529 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1397.211937] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pig=11516 comm=syz-executor.5 [ 1397.230039] binder: 11523:11524 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1397.247361] binder: 11523:11528 ioctl 80044584 200000c0 returned -22 [ 1397.254072] binder: 11523:11524 ioctl 770a 0 returned -22 [ 1397.966543] binder: 11512:11533 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1397.973695] binder: 11512:11533 unknown command 0 [ 1397.978928] binder: 11512:11533 ioctl c0306201 20000c40 returned -22 17:06:59 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x48200, 0x0) write$FUSE_DIRENT(r1, &(0x7f0000000040)={0x60, 0x0, 0x2, [{0x2, 0x8, 0x1, 0x7, '-'}, {0x0, 0x5, 0x16, 0x8, 'vboxnet1selfvboxnet0[@'}]}, 0x60) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="a27bdaeb"], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:59 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x8) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x4, 0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(r2, &(0x7f0000000140)='security.ima\x00', &(0x7f0000000180)=@v2={0x3, 0x2, 0x6, 0x5, 0xac, "08bce44fbfb808aff0132a3008468a60ff9f13b0638ee8b9ea28df19d3c6e8d1a7421fe2f135e0f4574269dec50826d72dd7363a96c00b261553a1fe0d4f931bae98f409f626b3f98d73430b65a22a7873a9e4d98a9a383f2e63ca59dd4195a0e7fcaedbf9d3ca523093b60240aa5c93dc462233d67e8d5abd5ba50bed06cd59a40bacc68e9135f1d3cb39a380d7f994c2f45768e0766946e3fc3d632fae32bb2d8e4c0bc20bf39200287ea2"}, 0xb6, 0x3) open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x104) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:59 executing program 1: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f0000000000)={'filter\x00', 0x9c, "75ad4a2d778f5084d2b25d4264d24966ead513b38b87fd0c2b78f3ed55c207188ce0c1b52f9e74cda2d76217ec215f030eec7b89bf8273bf9f33cd386c6e3fce7ccf2fee259cd241264f79b2b60fd0288a05a3c3674565550a2bd9df1e75d42960b38ff1d70bc49db666d8f2632116b648aa27d6f2a6ac06af0b505d2e66b43944d2a189fe277f3506d58ad56609c49b757befea073108b7448235a3"}, &(0x7f00000000c0)=0xc0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0xb4, r1, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_LINK={0x34, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}, @TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x401}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x1c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x80}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x10}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000300)={0x0, @speck128, 0x1, "e5d7db1b6826a3cf"}) r4 = accept(r3, &(0x7f0000000340)=@xdp, &(0x7f00000003c0)=0x80) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000580)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x804140}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0xf0, r1, 0x700, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_LINK={0xd0, 0x4, [@TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8a9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x22}]}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) openat$ion(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/ion\x00', 0x240000, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000600)={0x68, 0xfffffffffffffffe, 0x2, [{0x2, 0x6, 0x1d, 0x7, 'wlan0|,cpuset%)md5sum/*!:user'}, {0x0, 0x3, 0x7, 0x4, 'filter\x00'}]}, 0x68) r5 = getuid() r6 = getegid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000680)={0xb0, 0x0, 0x3, [{{0x2, 0x0, 0xffffffff, 0x0, 0x9, 0x4, {0x5, 0x6, 0xec77, 0x8, 0xffff, 0x5, 0x2, 0x10001, 0xff, 0x0, 0x6, r5, r6, 0xffffffffffffffff, 0x49}}, {0x4, 0x9, 0x5, 0x2, 'syz1\x00'}}]}, 0xb0) r7 = eventfd(0x0) r8 = request_key(&(0x7f0000000740)='keyring\x00', &(0x7f0000000780)={'syz', 0x2}, &(0x7f00000007c0)='TIPCv2\x00', 0xfffffffffffffff9) r9 = add_key$keyring(&(0x7f0000000880)='keyring\x00', &(0x7f00000008c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$search(0xa, r8, &(0x7f0000000800)='logon\x00', &(0x7f0000000840)={'syz', 0x1}, r9) write$P9_RWSTAT(r0, &(0x7f0000000900)={0x7, 0x7f, 0x2}, 0x7) ioctl$PERF_EVENT_IOC_DISABLE(r7, 0x2401, 0x1) ioctl$VT_DISALLOCATE(r0, 0x5608) ioprio_set$uid(0xd03350cd8a575a5d, r5, 0x7) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000001980)={0x8, 0x0, &(0x7f0000000940)=[@release], 0x1000, 0x0, &(0x7f0000000980)="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"}) pipe2(&(0x7f00000019c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$TIOCLINUX5(r10, 0x541c, &(0x7f0000001a00)={0x5, 0x4, 0x7, 0x6, 0x8}) time(&(0x7f0000001a40)) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000001a80)={&(0x7f0000ffc000/0x4000)=nil, 0x4000}, &(0x7f0000001ac0)=0x10) mount$fuse(0x0, &(0x7f0000001b00)='./file0\x00', &(0x7f0000001b40)='fuse\x00', 0x100000, &(0x7f0000001b80)={{'fd', 0x3d, r10}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r6}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@smackfsdef={'smackfsdef', 0x3d, 'syz0\x00'}}, {@obj_user={'obj_user', 0x3d, '\'!,(posix_acl_accessbdev'}}, {@obj_role={'obj_role', 0x3d, 'logon\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}]}}) r11 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000001c80)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r11, 0x29, 0x2d, &(0x7f0000001cc0)={0x9, {{0xa, 0x4e24, 0x100, @loopback, 0x9}}}, 0x88) keyctl$search(0xa, r8, &(0x7f0000001d80)='dns_resolver\x00', &(0x7f0000001dc0)={'syz', 0x2}, r8) 17:06:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) chmod(&(0x7f00000000c0)='./file0\x00', 0x114) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:59 executing program 5: sendmsg$netlink(0xffffffffffffffff, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1800a4217d04d31100e8"], 0x1}], 0x1}, 0x0) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.upper\x00', &(0x7f0000000140)=""/83, 0x53) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x313, &(0x7f0000000000)=@raw=[@jmp], &(0x7f0000000100)='GPL\x00'}, 0x48) 17:06:59 executing program 5: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x80000000012, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x53) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000080)={0xffffffffffffff01, 0x6, 0x6, 0x7fff, 0xa9, 0x1, 0x5}) write$uinput_user_dev(r0, &(0x7f0000000640)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_CREATE(r0, 0x5501) ioctl$UI_GET_SYSNAME(r0, 0x8040552c, &(0x7f0000001ac0)) 17:06:59 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/ipc\x00') wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:06:59 executing program 1: futex(&(0x7f0000000040)=0x4, 0x0, 0x4, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000240)={0x0, 0x30, 0x2, @thr={&(0x7f0000000380)="e120bc3cf8d9df8619b29fc2c51d9f38c1731b87bb2098650d200174d9539c50f0d25d9c7065580dd18950d0c77e4e164da060cbf28123684c929bea0b7f8a86d120aa5793c3dad29856d1a49868b94a583a0160293b0db62e909203140bd2920a2625dc2fc1b0d00f8e551e351656ae094977a16a58a26cf1618513abb8b16474a49c794e5108344e17d6c73ac76d49e3389e59052ead411247ef8d9531a73c51fd9a22d4c41d234b0b2b1c8045ac4127c2146f2085e8bd7eba57a646467e67218d6609", &(0x7f0000000200)="7e1dac91c53cf46f72cf91ba5be2ef46adff"}}, &(0x7f00000002c0)=0x0) timer_gettime(r0, &(0x7f0000000300)) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) recvfrom$unix(r1, &(0x7f0000000080)=""/206, 0xce, 0x40, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000480)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PPPIOCDISCONN(r3, 0x7439) futex(&(0x7f0000000280), 0x800000000005, 0x0, 0x0, &(0x7f0000000040), 0x5000000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)) [ 1398.655330] binder: 11557:11559 unknown command -338003038 [ 1398.662610] binder: 11557:11559 ioctl c0306201 2000dfd0 returned -22 [ 1398.672044] binder: undelivered death notification, 0000000000000000 [ 1398.685118] binder: 11557:11559 unknown command -338003038 [ 1398.697182] binder: 11557:11559 ioctl c0306201 2000dfd0 returned -22 17:06:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0e633f00000000003ec06c12cdaa9acfaf8ac4fb71ffb8a47ede9ec70bcecf89a7336fd7937e959a81146a7e63221e2f51d038966d86"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1398.729914] input: syz1 as /devices/virtual/input/input82 [ 1398.753606] binder: 11584:11588 unknown command 4154126 [ 1398.761200] binder: 11584:11588 ioctl c0306201 20008fd0 returned -22 [ 1398.772825] binder: 11584:11588 unknown command 4154126 17:06:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x802) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000100)='/dev/keychord\x00', 0x189000, 0x0) ioctl$sock_inet_SIOCDELRT(r2, 0x890c, &(0x7f00000001c0)={0x0, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x22}}, {0x2, 0x4e21, @loopback}, {0x2, 0x4e22, @multicast2}, 0x1, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)='bridge_slave_0\x00', 0xffffffff, 0xc2a, 0x7}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r3 = dup2(r1, r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) ioctl$sock_inet6_tcp_SIOCINQ(r3, 0x541b, &(0x7f00000000c0)) dup(r1) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r3) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000280)={'nat\x00', 0x0, 0x0, 0x0, [], 0x3, &(0x7f0000000240)=[{}, {}, {}], 0x0, [{}, {}, {}]}, 0xa8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) alarm(0x2) [ 1398.779082] binder: 11584:11588 ioctl c0306201 2000dfd0 returned -22 [ 1398.785892] input: syz1 as /devices/virtual/input/input83 [ 1398.790199] binder: 11564:11580 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1398.793538] binder: 11564:11596 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:06:59 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x9c, r2, 0x601, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x81}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x730a}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8000}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'rr\x00'}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x5}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'eql\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip_vti0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x9}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x20044800}, 0x4) close(r0) 17:06:59 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) chmod(&(0x7f00000000c0)='./file0\x00', 0x114) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:59 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e630c40000000007fab21ffd01ed01c075c5bf1e9a0a88490d7f2c2bf770af82793a44174cfe28d912efde94e8a48c8994ea2f70fa3f42fdd751c977a90fd10d2778e7f5f0ab0d39a115c569009f64bb22bd21eeec55facf2ee9cc7dfbdeef8871028e72471a1c07827b9f07bdf1bb6fe128cdcf0099ff37e09573fe35eae17236a5b728a9130a772a49edec5e2e10950e7f7d42788a053"], 0x0, 0x0, 0x0}) ftruncate(r1, 0x100000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) setsockopt$inet6_MRT6_ADD_MIF(r2, 0x29, 0xca, &(0x7f00000000c0)={0x81, 0xdf184ec2c522288, 0x20, 0x80000000, 0x6}, 0xc) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:59 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='coredump_filter\x00\v\xd0\x03\\\x98\x99A\xb2\x1bK\xfd\xe5\x01\x85\xd1\x9f\v\x06l3s6\x10J\xabX\xa7%\x8e\xa8K~\xcf\x83\xff\x82\xa49\x85+BEML<\xf6\x00\x1dFtL\x81>W\'\xa4\xbdG\xe6&') getpeername$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000000c0)=0x1c) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000180)={0xffffffffffbfffff, 0xfffffffc, 0x4ec5, 0x1000, 0x1, 0x9, 0x4000001, 0x8, 0xffffffff, 0x1000008}) sendfile(r0, r0, 0x0, 0x40000000000002) lseek(r0, 0x0, 0x4) 17:06:59 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x4, 0x3) tkill(r0, 0x34) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'ip6tnl0\x00', 0x400}) 17:06:59 executing program 1: r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000006400)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd7c}}], 0x59d, 0x2, 0x0) 17:06:59 executing program 4: clone(0x204000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000004dc0), &(0x7f0000004e00)=0x14) wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x80004f9, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_SET_SECUREBITS(0x1c, 0x2) gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000004d00)={0x0, 0x0}) recvmmsg(0xffffffffffffffff, &(0x7f0000004ac0)=[{{&(0x7f0000000140)=@l2, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/206, 0xce}, {&(0x7f00000002c0)=""/187, 0xbb}, {&(0x7f0000000380)=""/147, 0x93}, {&(0x7f0000000440)=""/117, 0x75}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000540)=""/83, 0x53}], 0x6, &(0x7f0000000640)=""/187, 0xbb}, 0x9}, {{&(0x7f0000000700)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000001840)=[{&(0x7f0000000780)=""/142, 0x8e}, {&(0x7f0000000840)=""/4096, 0x1000}], 0x2, &(0x7f0000001880)=""/66, 0x42}}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000001900)=""/32, 0x20}, {&(0x7f0000001940)=""/207, 0xcf}, {&(0x7f0000001a40)=""/163, 0xa3}, {&(0x7f0000001b00)=""/33, 0x21}], 0x4}}, {{0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001b80)=""/173, 0xad}, {&(0x7f0000001c40)=""/85, 0x55}, {0x0}], 0x3, &(0x7f0000001d00)=""/101, 0x65}, 0x3}, {{0x0, 0x0, &(0x7f0000002f40)=[{&(0x7f0000001d80)=""/163, 0xa3}, {&(0x7f0000001e40)=""/4096, 0x1000}, {&(0x7f0000002e40)=""/213, 0xd5}], 0x3}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f80)=""/165, 0xa5}], 0x1, &(0x7f0000003080)=""/237, 0xed}, 0x9}, {{&(0x7f0000003180)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f0000003580)=[{&(0x7f0000003200)=""/114, 0x72}, {&(0x7f0000003280)=""/128, 0x80}, {&(0x7f0000003300)=""/52, 0x34}, {&(0x7f0000003340)=""/103, 0x67}, {&(0x7f00000033c0)=""/32, 0x20}, {&(0x7f0000003400)=""/167, 0xa7}, {&(0x7f00000034c0)=""/22, 0x16}, {&(0x7f0000003500)=""/90, 0x5a}], 0x8, &(0x7f0000003600)=""/53, 0x35}, 0x5}, {{&(0x7f0000003640)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f00000046c0)=[{&(0x7f00000036c0)=""/4096, 0x1000}], 0x1, &(0x7f0000004700)=""/151, 0x97}, 0x6}, {{&(0x7f00000047c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000004a00)=[{&(0x7f0000004840)=""/45, 0x2d}, {&(0x7f0000004880)=""/105, 0x69}, {&(0x7f0000004900)=""/17, 0x11}, {&(0x7f0000004940)=""/3, 0x3}, {&(0x7f0000004980)=""/92, 0x5c}], 0x5, &(0x7f0000004a80)=""/64, 0x40}, 0x5}], 0x9, 0x100, &(0x7f0000004d40)={r4, r5+10000000}) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f0000004e40)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000004d80)={@dev={0xfe, 0x80, [], 0x14}, 0x65, r6}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000004f00)={&(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000004e80)="e3222c190a4387f0ab984ef1772ad69abb22b328c23b042808640045619a80ad3765634366af2b97a9537ddb8080bf9240eb29793ce25796acd6fe503658072207a49048b529b485168fd0b029d5da1d0fb8c26298233e2c6f9c9b19844af868f800f94bafee8c4aa53e6851eb00cebe3cf820e8ce16003d9f40ed", 0x7b, r3}, 0x68) ptrace$setopts(0xfffff7ffffffffff, r0, 0x0, 0x0) r7 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000004f80)=0x1c, 0x80800) gettid() getsockopt$inet6_mreq(r7, 0x29, 0x15, &(0x7f0000000080)={@local}, &(0x7f00000000c0)=0x14) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) [ 1398.818157] binder: 11584:11602 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1398.822869] binder: 11601:11603 ioctl c0306201 2000dfd0 returned -11 [ 1398.822929] binder: 11601:11603 ioctl 541b 200000c0 returned -22 [ 1398.823877] binder: undelivered death notification, 0000000000000000 17:06:59 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7}) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4d1bccd3d2b926f19c9b14100f34"], 0xe}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3b) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) wait4(r0, &(0x7f0000000000), 0x80000000, &(0x7f0000000200)) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) ptrace$setopts(0x4200, r0, 0x6, 0x2) [ 1398.825289] binder: 11601:11603 unknown command 536872576 [ 1398.825295] binder: 11601:11603 ioctl c0306201 20008fd0 returned -22 [ 1398.825321] binder: 11601:11604 ioctl c0306201 2000dfd0 returned -11 [ 1398.825379] binder: 11601:11603 ioctl 541b 200000c0 returned -22 [ 1398.825523] binder: 11601:11603 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:06:59 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ashmem\x00', 0x101000, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000702000/0x3000)=nil, 0x3000, 0xfffffffffffffffd, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000600)=0x0) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f00000006c0)=[0xee00, 0xee00, 0xffffffffffffffff]) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000700)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000740)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000840)=0xe8) ioctl$FIGETBSZ(r1, 0x2, &(0x7f0000000a00)) r8 = getgid() ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000880)=0x0) r10 = getuid() r11 = getgid() sendmsg$unix(r1, &(0x7f00000009c0)={&(0x7f0000000180)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000200)="2dd62757613b546d782d44a378feabcf8b919190a59c41718642d947c11456fa3c896a47957e237feb4ab8cdbe6a6ede20654511b7856b765cefa3de1edc814603a764d831bd6324b97a24e054f91af1c321519553b25461fb54ae917f439afc00a0512bb54ceb61e0ec4674631146a290cb29146da9a9c6a0e8964d8f28b0a3b10cb62597b50c0430eebdece430", 0x8e}, {&(0x7f00000002c0)="7cf887b40c4b59bc02171f85e9d5a81ad009f0e60c7be23b090dafc067c469e84a609334337cced89a4f8910c6a53e14f38fa805ab76ed13a38b409abea2bf97ddd49c330ac3901bf07c4f5663071698ff3935d9ca6fe3f7afca41d9c8b5683f806c2c57f894d3811a9aec72a44a63c21c9511ff43e2a51e", 0x78}, {&(0x7f0000000000)="99088a4b67b77060968f9e1ec7556fda435ffa5aab84655be3d530f874", 0x1d}, {&(0x7f00000000c0)="da9e5a782e1307f7a253dac88ad851862762761aa5aef77a028a51a41addc69d72e0d1d9afe41ecd1e14b9a187e928579b828767fc", 0x35}, {&(0x7f0000000340)="2854dbd203ad040857818b3ace56bbbd4e1db4713713d8783135e6faa631c313a73226f5495fbb1e77fdaaaf0a52654bc794f7ca715bd1d03a3f8081e01e793728ec8abb", 0x44}, {&(0x7f00000003c0)="c44025518bfe35bbd22b32ae1fe34398649f408ceb799f29ae1f709517d3c16268bc221948e6f7cc7dc25d7aefe9eaad59523bd99c923438f2676524b3cc11e11bca607e44e33d52d3aabe2a3e14c186f50aade761208396355d6a127b78d27e59d5cc697e3a63735073c2277dead407121f45ef04911b3090fa4792bbd42eda2b9f3a15095e0068d8875dee1aba8fc987140da344244f43ea38d3d5e713e32f4738961c9c8902b4ade9649db9560dfe5c7eda6efeafd63b7f08738231cfcc8ca155475212f98e16d1e169c66115ddf4c51cad7bc8c4389e513c729ca0bbf0e196e29f14075feb437b9812a982e4ed3ddafb", 0xf2}, {&(0x7f00000004c0)="566f2a96082bb8b045953b26c9553144a232b4cde97d4d86104daf7108da22512c4f60701e16948e0c2ab7fc76e6e21db7a3b49758c93636006a0ff1906cc6cb559c1d6432cf61abdea6d69289357c52188bbbedfeb3bee0b5e33066049f089914ed2e39e025a165482270465cce16cfac8017cb69d939eb15c75b8f1f7b0a7e72c90c78fceaaf3a207615a1d1c20586e266b7639bbed7aeab507d308ea751ad08973541a2f741e5c984d0a24fca", 0xae}], 0x7, &(0x7f00000008c0)=[@cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @rights={{0x24, 0x1, 0x1, [r2, r1, r0, r2, r1]}}, @rights={{0x34, 0x1, 0x1, [r0, r2, r1, r2, r1, r1, r1, r1, r0]}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}, @rights={{0x14, 0x1, 0x1, [r2]}}], 0xd8, 0x24000000}, 0x10) close(r0) r12 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$UI_SET_LEDBIT(r12, 0x40045569, 0xe) ioctl$sock_SIOCOUTQNSD(r12, 0x894b, &(0x7f0000000080)) 17:06:59 executing program 5: clone(0x1ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) rt_sigtimedwait(&(0x7f00000000c0), 0x0, 0x0, 0x8) r0 = getpid() rt_tgsigqueueinfo(r0, r0, 0x16, &(0x7f0000000100)={0x8000000000000}) ptrace(0x10, r0) ptrace$cont(0x1a, r0, 0x0, 0x0) 17:06:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$RTC_AIE_ON(r1, 0x7001) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1398.949166] binder: 11584:11641 unknown command 4154126 [ 1398.955939] binder: 11584:11641 ioctl c0306201 20008fd0 returned -22 [ 1398.964085] binder: 11584:11588 unknown command 4154126 [ 1398.970570] binder: 11584:11588 ioctl c0306201 2000dfd0 returned -22 [ 1398.976237] binder: 11636:11646 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 1cd01ed0ff21ab7f != 0000000000000000 17:06:59 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socketpair(0x10, 0xf, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000002c0)=0x14) accept4$packet(r2, &(0x7f00000009c0)={0x11, 0x0, 0x0}, &(0x7f0000000a00)=0x14, 0x800) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000cc0)={@dev, 0x0}, &(0x7f0000000d00)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000d40)={{{@in=@initdev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000e40)=0xe8) accept4$packet(0xffffffffffffffff, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000ec0)=0x14, 0x800) clock_gettime(0x0, &(0x7f0000003840)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000003740)=[{{&(0x7f0000000f00)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000000f80)=""/57, 0x39}, {&(0x7f0000000fc0)=""/96, 0x60}, {&(0x7f0000001040)=""/130, 0x82}], 0x4, &(0x7f0000001140)=""/38, 0x26}, 0x200}, {{0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001180)=""/25, 0x19}], 0x1, &(0x7f0000002240)=""/49, 0x31}, 0xb8}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/182, 0xb6}, {&(0x7f0000002340)=""/97, 0x61}], 0x2}, 0x7d77840e}, {{&(0x7f0000002400)=@ll={0x11, 0x0, 0x0}, 0x80, &(0x7f0000003640)=[{&(0x7f0000002480)}, {&(0x7f00000024c0)=""/6, 0x6}, {&(0x7f0000002500)=""/4096, 0x1000}, {&(0x7f0000003500)=""/68, 0x44}, {&(0x7f0000003580)=""/161, 0xa1}], 0x5, &(0x7f00000036c0)=""/118, 0x76}, 0x400}], 0x4, 0x12000, &(0x7f0000003880)={r11, r12+30000000}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000038c0)={{{@in=@initdev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f00000039c0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000003a00)={{{@in6=@ipv4={[], [], @dev}, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@initdev}}, &(0x7f0000003b00)=0xe8) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003b80)={'syz_tun\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000003bc0)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@remote}}, &(0x7f0000003cc0)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000003d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000003d40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1d, &(0x7f0000005500)={@remote, 0x0}, &(0x7f0000005540)=0x14) accept$packet(0xffffffffffffffff, &(0x7f0000005580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000055c0)=0x14) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000005600)={@local, @dev, 0x0}, &(0x7f0000005640)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000005880)={'team0\x00', 0x0}) getpeername$packet(0xffffffffffffffff, &(0x7f00000058c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000005900)=0x14) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000059c0)={0x0, @dev, @initdev}, &(0x7f0000005a00)=0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000005a40)={'bridge_slave_1\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@ipv4={[], [], @loopback}}}, &(0x7f0000005b80)=0xfffffffffffffdd2) accept$packet(0xffffffffffffffff, &(0x7f0000005bc0)={0x11, 0x0, 0x0}, &(0x7f0000005c00)=0x14) recvmmsg(r2, &(0x7f0000008940)=[{{&(0x7f0000005c40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000005dc0)=[{&(0x7f0000005cc0)=""/231, 0xe7}], 0x1, &(0x7f0000005e00)=""/45, 0x2d}, 0x6}, {{0x0, 0x0, &(0x7f0000005f40)=[{&(0x7f0000005e40)=""/195, 0xc3}], 0x1, &(0x7f0000005f80)=""/195, 0xc3}, 0x5}, {{&(0x7f0000006080)=@nfc, 0x80, &(0x7f0000006680)=[{&(0x7f0000006100)=""/154, 0x9a}, {&(0x7f00000061c0)=""/159, 0x9f}, {&(0x7f0000006280)=""/114, 0x72}, {&(0x7f0000006300)=""/73, 0x49}, {&(0x7f0000006380)=""/33, 0x21}, {&(0x7f00000063c0)=""/217, 0xd9}, {&(0x7f00000064c0)=""/86, 0x56}, {&(0x7f0000006540)=""/255, 0xff}, {&(0x7f0000006640)=""/23, 0x17}], 0x9, &(0x7f0000006740)=""/166, 0xa6}, 0x26a000000000}, {{&(0x7f0000006800)=@in6={0xa, 0x0, 0x0, @dev}, 0x80, &(0x7f0000006b00)=[{&(0x7f0000006880)=""/65, 0x41}, {&(0x7f0000006900)=""/53, 0x35}, {&(0x7f0000006940)=""/173, 0xad}, {&(0x7f0000006a00)=""/176, 0xb0}, {&(0x7f0000006ac0)=""/60, 0x3c}], 0x5, &(0x7f0000006b80)=""/252, 0xfc}, 0x7}, {{&(0x7f0000006c80)=@generic, 0x80, &(0x7f0000006f40)=[{&(0x7f0000006d00)=""/30, 0x1e}, {&(0x7f0000006d40)=""/2, 0x2}, {&(0x7f0000006d80)=""/185, 0xb9}, {&(0x7f0000006e40)=""/125, 0x7d}, {&(0x7f0000006ec0)=""/102, 0x66}], 0x5, &(0x7f0000006fc0)=""/62, 0x3e}, 0x10000}, {{&(0x7f0000007000)=@isdn, 0x80, &(0x7f0000007200)=[{&(0x7f0000007080)=""/177, 0xb1}, {&(0x7f0000007140)=""/175, 0xaf}], 0x2, &(0x7f0000007240)}, 0x7}, {{&(0x7f0000007280)=@can={0x1d, 0x0}, 0x80, &(0x7f0000008780)=[{&(0x7f0000007300)=""/94, 0x5e}, {&(0x7f0000007380)=""/91, 0x5b}, {&(0x7f0000007400)=""/36, 0x24}, {&(0x7f0000007440)=""/234, 0xea}, {&(0x7f0000007540)=""/101, 0x65}, {&(0x7f00000075c0)=""/89, 0x59}, {&(0x7f0000007640)=""/4096, 0x1000}, {&(0x7f0000008640)=""/174, 0xae}, {&(0x7f0000008700)=""/1, 0x1}, {&(0x7f0000008740)=""/14, 0xe}], 0xa, &(0x7f0000008840)=""/212, 0xd4}, 0x7}], 0x7, 0x21, &(0x7f0000008b00)) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000008b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000009600)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000095c0)={&(0x7f0000008b80)={0xa18, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [{{0x8, 0x1, r5}, {0x40, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r6}}}]}}, {{0x8, 0x1, r7}, {0x90, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8, 0x1, r8}, {0x24c, 0x2, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x24, 0x4, [{0x7fffffff, 0x80000000, 0x3, 0x1}, {0xffffffffffffffc1, 0x400, 0x80000001, 0x5}, {0x10000, 0x6, 0xf70, 0x180}, {0x100, 0x7ff, 0xffff, 0x7f}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x51}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r13}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r14}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r15}, {0x188, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r16}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r17}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x1c, 0x4, [{0x20, 0x99bd, 0x3, 0xffffffffffffffc1}, {0xffffffff, 0x83, 0x1f, 0x27a10796}, {0x5, 0x4, 0x401, 0x81}]}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r18}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x100}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r19}}, {0x8}}}]}}, {{0x8, 0x1, r20}, {0x1dc, 0x2, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0xecaa}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x8, 0x8d4, 0x8d, 0x8}, {0x18, 0xfff, 0xfffffffffffffffe, 0x1}, {0x5, 0x4, 0x8, 0x3}, {0x7, 0x4, 0x0, 0x7}, {0x1, 0x4, 0x40}, {0x8, 0x7fffffff, 0x100000001, 0x401}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r21}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x8}, {0x8, 0x4, r22}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x1}}, {0x8}}}]}}, {{0x8, 0x1, r23}, {0x140, 0x2, [{0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x8}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r24}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x8}, {0x1c, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r25}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x43a0}}}]}}, {{0x8, 0x1, r26}, {0x20c, 0x2, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x8}, {0x8, 0x4, 0x80000001}}, {0x8, 0x6, r27}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x4ff}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r28}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x8}, {0x8, 0x4, 0xffffffffffffff03}}, {0x8, 0x6, r29}}}, {0x64, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x34, 0x4, [{0x7, 0x6, 0x2, 0x7}, {0x40, 0x400, 0x80000000, 0x70a097b3}, {0x7f, 0x7, 0x3, 0x200}, {0x800, 0xfffffffffffffffb, 0x5, 0x100000000}, {0x6, 0x2, 0x9, 0x7fffffff}, {0x4, 0x6, 0x5, 0x101}]}}}]}}]}, 0xa18}, 0x1, 0x0, 0x0, 0x4010}, 0x0) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:06:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:06:59 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r1, &(0x7f0000000000), 0x20000000, &(0x7f0000000040)) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x2000000000000, 0x20) gettid() ptrace$setopts(0x4206, r1, 0x4000000000000, 0x0) tkill(r0, 0x34) [ 1399.021367] binder: 11655:11660 ioctl 7001 0 returned -22 [ 1399.029453] binder: undelivered death notification, 0000000000000000 [ 1399.039466] binder: 11655:11661 unknown command 0 [ 1399.044573] binder: 11655:11660 ioctl 7001 0 returned -22 [ 1399.051599] binder: 11655:11662 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1399.061772] binder: 11655:11661 ioctl c0306201 20008fd0 returned -22 [ 1399.101751] binder: 11669:11670 unknown command 0 [ 1399.106881] binder: 11669:11670 ioctl c0306201 20008fd0 returned -22 [ 1399.114397] binder: 11669:11670 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1399.124446] binder: 11669:11677 unknown command 0 [ 1399.130057] binder: 11669:11677 ioctl c0306201 20008fd0 returned -22 17:07:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="193ec4777d3be5fff3c5783137539a43fc51d90a32e53e2379dbbb8b129d3512bbe981e3fa0da1c56dcdfc387cc780bc42c0a6fe83521cf77427e8434872d90e2affe96057d7c9d2daaa1d1ffb3f7fc8b4c005395dc34807490b28798d5ae8a7a6943ce6fab744757898272e2c7a776a7c3f0640de0ea077f014f7734c4b5213efa7a98b074006692b2e339d82f97a0bba7dd7458985c6f5eb069705e42eb3e7b4392036bbd8e93134d025c282ecaf8fbc3c2f5a146c68083ab02e00c0c093040a5a37a2506788682b18bf677bbc2e509b46475fadfde61935ac78bd6a97c38ef707957dfc63dbbb7249d380db928bd7ae61b86325fa3798ebc676a336b5257c2b18ded24c9eb55d7c0647b28a39185186cb1cf01a109bcf117fda4356eadbacba0129ca35"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) bind$inet(r2, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)={0x0, @speck128, 0x1, "91ec4d593ef2db86"}) 17:07:00 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x2, 0x0) ptrace$setopts(0xffffffffffffffff, r0, 0x1, 0x4) tkill(r0, 0x34) 17:07:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) write$selinux_load(r2, &(0x7f0000000100)={0xf97cff8c, 0x8, 'SE Linux', "4a721c3db9fb79ebc5a30679251d8e90fc639f27266fd8ee"}, 0x28) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:00 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x3, 0x0) ioctl$UI_DEV_DESTROY(r0, 0x5502) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0xd, &(0x7f0000000040)='keyringbdev/\x00', 0x0}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r2, 0x4) dup3(r0, r1, 0x0) 17:07:00 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(r0, 0x0, 0x81000001, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x440400, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000040)={0xffffffff, {{0x2, 0x4e23, @remote}}}, 0x88) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:07:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) getpeername$packet(r2, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000600)=0x14) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000640)={@mcast1, r3}, 0x14) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1399.727722] binder: 11636:11681 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1399.746360] binder: undelivered death notification, 0000000000000000 [ 1399.757806] input: syz1 as /devices/virtual/input/input84 17:07:00 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x280080, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)='lo\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f0000000480)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1df) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev, @multicast1}, &(0x7f00000000c0)=0xc) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{r1, 0x1}, {0xffffffffffffffff, 0x6000}, {r1, 0x3}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0xa, 0x6, 0x10, "75f2dc8d1facd4b03311d3793f3fc40c7187a172cc59cba9ab6d08f500ee3ce205a81ed33c6b58d01bbdb28d51fe53b870f0a2f2ae8f4f199700d8574a4d3210", "d632e6d03e237537363b9dcec43b7fade3fdef212474cc0d993302b70cb855e6797a86ee357d173799fa4e848463fe243fabca80dafa299978704b5007ced15c", "f33d605ae3e0d54792588be9471293223c3efe49c20347342368d311198f90bf", [0x6, 0x2]}) 17:07:00 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x7ffffffc, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) keyctl$set_reqkey_keyring(0xe, 0x7) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x101000) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x802, 0x0) sendfile(r2, r3, 0x0, 0xfffffffffffffffa) tkill(r0, 0x34) 17:07:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0000008900000000"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1399.797016] binder: undelivered death notification, 0000000000000000 [ 1399.812301] binder: 11706:11707 unknown command 2009349657 [ 1399.847510] binder: 11706:11707 ioctl c0306201 20008fd0 returned -22 17:07:00 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) quotactl(0xdf2, &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000540)="c3a0f6b3121f72a03a0bfc1ebd452ff8a65f912590f55ceb6d4a8b2f7556616f149b346756ab0f02993fb83a4276407ae8d695b2c8a67311559096a892db8c56a76b633d5b711fa5d26a961d2385e3cc57cfadcc5a3f90134bfc8908070a68c66b9ade18391e626fc4acdb435db531bf5a3665d59bb5ecbf46125bb894b709a772afad16a21262a5d56bbdc175650b79d35708d2abd77cd44b7198c2c1470fc4932d5f11272e9e33d71d7143ddd0e60664a4e82fd7b66798f1d35ae273c21b1c") socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x800400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x4) setsockopt$inet6_MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000000c0)={0x6, 0x1, 0x6, 0x4000000000, 0xf6b0}, 0xc) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r4 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x1) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) 17:07:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x8, 0x0, &(0x7f00000000c0)=[@release={0x40046306, 0x2}], 0xad, 0x0, &(0x7f0000000180)="c84aa1337802b04f581b8842be4b6d92a6f3af15388b64622d62ef9fbedffd70999b5b1589fb51b338d65fd44dd305f1617a9a15b974249f2fb2336c8a3f32ae90a29e4c6941d851a55b57274010445167c58d06498614864f08958326cf478a2a50a86154a010e1d4b31ee7c4d30cdb5bb05af8616a82f83ceaba7c766ea50b318a5c779e596608b9a2037b11ef3520f6b27269cbf741e1cc2cffab981404444e04f8ee4a165919cbb4a6a7e6"}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:00 executing program 1: writev(0xffffffffffffffff, &(0x7f0000000080)=[{&(0x7f00000000c0)="290000002000390700083fffffffda060200000039e80001040000040d00140000000000e7ffffff01", 0x29}], 0x1) [ 1399.857287] binder: 11716:11717 unknown command -1996488704 [ 1399.857297] binder: 11716:11717 ioctl c0306201 20012000 returned -22 [ 1399.857806] binder: 11716:11717 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1399.858757] binder: 11716:11717 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1399.861029] binder: 11716:11723 unknown command -1996488704 [ 1399.861038] binder: 11716:11723 ioctl c0306201 20012000 returned -22 [ 1399.861363] binder: 11706:11720 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1399.861483] binder: 11706:11720 ioctl 800c6613 200000c0 returned -22 17:07:00 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000100)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:00 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000011000)={0x1, 0xb, 0x6d, 0x2, 0x0, 0x0}, 0x2c) bpf$MAP_CREATE(0x2, &(0x7f0000000180)={0x3, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0}, 0x2b) prctl$PR_SET_SECUREBITS(0x1c, 0x39) 17:07:00 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="11dca5055e0bcfec7be070") openat$zero(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/zero\x00', 0x280080, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000440)={0x0, 0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000400)='lo\x00', 0xffffffffffffffff}, 0x30) fstat(r0, &(0x7f0000000480)) getsockname$inet6(0xffffffffffffffff, &(0x7f0000000580)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1df) unshare(0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @dev, @multicast1}, &(0x7f00000000c0)=0xc) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x2000, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x0, 0x0) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) poll(&(0x7f0000000000)=[{r1, 0x1}, {0xffffffffffffffff, 0x6000}, {r1, 0x3}], 0x3, 0x0) ioctl$sock_ifreq(r1, 0x89f1, &(0x7f0000000080)={'sit0\x00', @ifru_flags}) ioctl$LOOP_SET_STATUS64(r2, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0xa, 0x6, 0x10, "75f2dc8d1facd4b03311d3793f3fc40c7187a172cc59cba9ab6d08f500ee3ce205a81ed33c6b58d01bbdb28d51fe53b870f0a2f2ae8f4f199700d8574a4d3210", "d632e6d03e237537363b9dcec43b7fade3fdef212474cc0d993302b70cb855e6797a86ee357d173799fa4e848463fe243fabca80dafa299978704b5007ced15c", "f33d605ae3e0d54792588be9471293223c3efe49c20347342368d311198f90bf", [0x6, 0x2]}) 17:07:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:00 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route_sched(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000814}, 0xc, &(0x7f0000000300)={&(0x7f0000000140)=@deltaction={0x198, 0x31, 0x0, 0x70bd2b, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x1c, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x14, 0xf, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x2, @TCA_ACT_INDEX={0x8, 0x3, 0xfffffffffffffffb}}, {0x10, 0x1e, @TCA_ACT_INDEX={0x8, 0x3, 0x40000}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0x14, 0x2, @TCA_ACT_KIND={0xc, 0x1, 'skbmod\x00'}}, {0x10, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x6c, 0x1, [{0x10, 0x13, @TCA_ACT_INDEX={0x8, 0x3, 0x107c}}, {0x10, 0xc, @TCA_ACT_INDEX={0x8}}, {0x14, 0x10, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0xf, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0x14, 0x6, @TCA_ACT_KIND={0xc, 0x1, 'csum\x00'}}, {0x10, 0xe, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}]}, @TCA_ACT_TAB={0x4c, 0x1, [{0x14, 0x13, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x6e}}, {0x14, 0xc, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0x1d, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0x10, 0x11, @TCA_ACT_INDEX={0x8, 0x3, 0x2}}, {0x10, 0xd, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0x10, 0x10, @TCA_ACT_INDEX={0x8, 0x3, 0x7b}}, {0x10, 0x4, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}, {0x14, 0x18, @TCA_ACT_KIND={0xc, 0x1, 'mirred\x00'}}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x200008c4}, 0x40) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1399.861983] binder: 11716:11723 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1399.880087] input: syz1 as /devices/virtual/input/input85 [ 1399.921282] IPv6: : Disabled Multicast RS [ 1400.084503] binder: 11706:11707 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:07:00 executing program 1: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) write(r1, &(0x7f00000001c0), 0xfffffef3) read(r0, &(0x7f0000000200)=""/250, 0x50c7e3e3) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/arp\x00') sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={&(0x7f0000000080)=@xdp, 0x80, 0x0}, 0x0) preadv(r2, &(0x7f00000017c0), 0x1000000000000304, 0x400000000100) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000480)='TIPC\x00') sendmsg$TIPC_CMD_GET_MAX_PORTS(r0, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1008000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r4, 0xc00, 0x70bd2b, 0x25dfdbfc, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x48800) ioctl$TIOCSPGRP(r1, 0x5410, &(0x7f0000000400)=r3) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, 0x0, &(0x7f0000000140)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) fstat(0xffffffffffffffff, &(0x7f0000000180)) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, &(0x7f0000000640)=""/47) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000300)='trusted.overlay.opaque\x00', &(0x7f0000000340)='y\x00', 0x2, 0x2) syz_open_dev$sndtimer(&(0x7f0000000580)='/dev/snd/timer\x00', 0x0, 0x20482) 17:07:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0xfffffffffffffef8, 0x0, &(0x7f0000000140)=[@increfs={0x40046304, 0x2}], 0x114, 0x0, 0x0}) close(r0) r2 = syz_open_dev$mice(&(0x7f0000000540)='/dev/input/mice\x00', 0x0, 0x10240) ioctl$EVIOCGSND(r2, 0x8040451a, &(0x7f0000000580)=""/21) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) open(&(0x7f0000000500)='\x00', 0x50402, 0x11) getpeername(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000180)=0x80) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f00000001c0)=ANY=[@ANYBLOB="da000000000000000a004e200000800100000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000050000000a004e2000000003fe88000000000000000000000000010101000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e230000000500000000000000000000ffffe000000192050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000021000000000000000000000000000000000000000000000a004e20000000010000000000000000000000000000000164080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2000000002ff01000000000000000000000000000107000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a004e2400000002289f705a9210f4043f8d49f5dbdbc177090000000000000000000000000000000000000000000200"/784], 0x310) r4 = dup(r1) ioctl$UI_SET_ABSBIT(r4, 0x40045567, 0x1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1400.120226] binder: 11752:11756 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1400.131719] binder: 11752:11756 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1400.159849] binder: 11752:11759 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1400.197824] binder: 11768:11771 ioctl c0306201 20012000 returned -14 [ 1400.205252] binder: 11768:11771 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1400.214220] binder: 11768:11771 ioctl 40045567 1 returned -22 [ 1400.223122] binder: 11768:11771 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1400.232744] binder: 11768:11774 ioctl c0306201 20012000 returned -14 [ 1400.243807] binder: 11768:11774 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1400.252173] binder: 11768:11774 ioctl 40045567 1 returned -22 [ 1400.268921] binder: 11766:11773 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:07:03 executing program 4: clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000000)={0x0, 0xc, 0x3, @tid=r0}, 0xfffffffffffffffd) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:07:03 executing program 5: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c6300ca"], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:03 executing program 2: creat(&(0x7f0000000140)='./file0\x00', 0x191) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x800, 0x0) r1 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000340)='cgroupppp1+\x00') setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f00000003c0)=0x11, 0x4) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000180)) syncfs(r0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000380)='tls\x00', 0x4) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="b12922f4", @ANYRES16=r2, @ANYBLOB="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"], 0x1b4}, 0x1, 0x0, 0x0, 0x24008800}, 0x20000804) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:03 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'\xff\x00', 0x805002}) r1 = socket(0x10, 0x3, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='fdinfo/3\x00') r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$TUNSETVNETLE(r2, 0x400454dc, &(0x7f0000000000)=0x1) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f1f3c125c319bd070") getpid() rt_tgsigqueueinfo(0x0, 0x0, 0x0, 0x0) sendfile(r1, r2, 0x0, 0xe6) 17:07:03 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000280)={'ip6_vti0\x00', 0x8001}) mkdir(&(0x7f0000000240)='./file0\x00', 0xfffffffffffffffd) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) mkdirat(r1, &(0x7f0000000180)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r2 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)) renameat2(r1, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r2, &(0x7f0000000600)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) [ 1402.836082] binder: 11786:11789 unknown command -905944308 [ 1402.841906] binder: 11786:11789 ioctl c0306201 2000dfd0 returned -22 [ 1402.851927] binder: undelivered death notification, 0000000000000000 [ 1402.862524] binder: 11785:11787 unknown command 0 [ 1402.864147] binder: 11783:11784 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:07:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000100)=0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000440)=0x4, 0x4) sendmsg$nl_netfilter(r2, &(0x7f0000000400)={&(0x7f00000000c0), 0xc, &(0x7f00000003c0)={&(0x7f0000000180)={0x228, 0xc, 0xb, 0x100, 0x70bd2c, 0x25dfdbfe, {0xc, 0x0, 0x2}, [@generic="dd70955586a65b9e8a8749a1c8375ce80be79bcf898762bfc000bf1aaf9e2c1dedc5c03751c874716e5589114a6711f64968e52a449a944a76ae4a", @nested={0x1d8, 0x2, [@typed={0x8, 0x33, @uid=0xee01}, @typed={0x8, 0x6c, @pid=r3}, @generic="965f1cb4131df0b1b11baab4467284387a697f5fe2eb5de06d6574ec26cc76d1d20eb8eb229c2ed396086e", @generic="cea2d8b7dea3a4aba5f09f49033498cb2d79ab5ff84fa561c16f66f8f71adff50ba405dbd2463fb6fafc87d5dbeb599f7ed69eb0ae85e4ecfd4b23f037d962f39881578df9ee91b1392282c6c51cb43c794972e460df1b5cfab348c143b4e767b7fcb1801bac16f62a74a5c33e8fc467fd5ee27914e0f42fd94df34416f60220a5cb027caa17f2b184e1f7f325324bc98d3fa827b363d4931e33338c9dc369501e85f366d79b215b95fa0826affc5f67a0f2d83ff9706d4e35b0c3e6a7fad9e969997f", @generic="78dd1a33d2b3148f9ff9ebbf77c17a15ae2276a1db13ff7e6a6fb6f33b3077d68fd44317908823980b0d0b965d93171d615a9fb9aa899c492eefb7328b010df3ccb3fba6edeeccfa0bc9fe1dc4dce7f1cb441cff82af3e087426152355862070e4ffeb9c0ad6ec03da8a692b9d50386e9c8a9f39a12c717e11820f37ed78f27500999b41e672849ff7abd2eef5783968a9c7d30cb711535fbfd16f39e85b8108fd8847e1bc2d80430d1a03c7d7b6de057a13d2673b8dd88f09a21763f60e43352899abe4ac99790bdcd3c50ee9c0c1c9da03083d15", @generic]}]}, 0x228}, 0x1, 0x0, 0x0, 0x844}, 0x4000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:03 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ptmx\x00', 0x201, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xffffff78) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) r1 = syz_open_pts(r0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r2, 0x29, 0x3d, &(0x7f0000000380)=""/133, &(0x7f0000000000)=0x85) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000140)={0x0, 0x0, 0x0, 0xaf2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x0, 0x0, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$FIONREAD(r1, 0x541b, &(0x7f0000000340)) ioctl$sock_SIOCBRADDBR(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$IOC_PR_RELEASE(0xffffffffffffffff, 0x401070ca, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r3, 0x8004e500, 0x0) r4 = eventfd2(0x0, 0x0) read$eventfd(r4, &(0x7f00000000c0), 0x4e41e1fa) 17:07:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0563044000000000"], 0x0, 0x0, 0x0}) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vga_arbiter\x00', 0x602001, 0x0) ioctl$KDGKBENT(r2, 0x4b46, &(0x7f00000001c0)={0x0, 0x1, 0x2}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) socket$nl_xfrm(0x10, 0x3, 0x6) 17:07:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0xfffffffffffffdff, 0x0, &(0x7f0000000180), 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:03 executing program 4: clone(0x80000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4200, r0, 0xf6, 0x47) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setpgid(r0, r0) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) [ 1402.868268] binder: 11783:11784 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1402.870836] binder: 11786:11796 unknown command -905944308 17:07:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000500)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = socket(0x5, 0x2, 0x5) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000004c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21002040}, 0xc, &(0x7f0000000480)={&(0x7f0000000180)={0x2f4, r3, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x1c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}]}, @TIPC_NLA_MEDIA={0x74, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x9c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1, @mcast2, 0x36}}, {0x14, 0x2, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4cb6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffffffff6db3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7a0a}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_LINK={0x94, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xa8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2fb}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_MON={0x54, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1ff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe000000000000000}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}]}]}, 0x2f4}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:03 executing program 1: r0 = socket(0x10, 0xa, 0x9) sendmsg$nl_route(r0, &(0x7f0000000600)={&(0x7f0000000040), 0x6, &(0x7f00000005c0)={&(0x7f0000000000)=@bridge_getneigh={0x28, 0x1e, 0x309, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, 0x4955}]}, 0x28}}, 0x0) 17:07:03 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'teql0\x00', 0xc201}) r1 = dup3(r0, r0, 0x80000) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x800) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500bf0689ea010000000000f109a708f7829266b97cfa", 0x0}, 0x28) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0x2) [ 1402.870847] binder: 11786:11796 ioctl c0306201 2000dfd0 returned -22 [ 1402.884881] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=12297 sclass=netlink_route_socket pig=11793 comm=syz-executor.1 [ 1402.917053] binder: 11805:11812 ioctl 8903 20000100 returned -22 17:07:03 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r3 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000005c0)=0x0) r7 = getuid() getgroups(0x1, &(0x7f0000000600)=[0xee00]) r9 = getpgid(0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000640)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@remote}}, &(0x7f0000000740)=0xe8) r11 = getgid() sendmsg$unix(r1, &(0x7f0000000800)={&(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000003c0)=[{&(0x7f0000000140)="ed9cb1306f34fbd5ebce2f7f4010e7556f6980ffd792bac514ed74210a4708d5394176da84a1e082304dd465a31a1ebea0eabb106ebfe38512fa1a311f7d050c4c377aa93b6e4fc1189d040f0a3c6509a11abc8dea04c824ce44e609a25522d3c6be7184ee7ea11f41ecc64e027adda1e05315e0e545e0970e2d82050a3dbbba4e0120874afaae33652301c0e8147d48cbc7f8506a06e63014bb2cdd961436f0630de8165b4ec1d5906b7f72ca452a736ef99c3868d810649b45c88a6b6813711cd3868c1f89a71ac7622810a4f5a414bb91b43c19243d4289a29ed5dd253c3075d59160191be1", 0xe7}, {&(0x7f0000000080)="847ab6dae5b1d8133f0ca381f135", 0xe}, {&(0x7f0000000240)="895e839e009f8145b6a832d4b1925a5543fe2d6592333100bcff858376afa04a7f400c0896a9c0c3e1d9dfdb56d9cd0315abd57b63382cda2b6a3a628458aeffeb2bb0ab9fcb70f94b2c0bc3e3b86463", 0x50}, {&(0x7f00000000c0)="654ecf12715c851049b0b87577ba41a8c37716430bc10bdcec45311175426f31e15d80907facbba657f0045f743b", 0x2e}, {&(0x7f0000001200)="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", 0x1000}, {&(0x7f00000002c0)="ac2af24d38482f008a7fd6657daccb009ce15bb1e7952ab73087ee108cf8d99fbb321ca9ac500a5edf36f97252c3160a253ef01eda9ae5c1301ff0e9a528625a5d29297e6e3d11b5e807dbda6e2e68e8c2a3eccae8a85eb351ac893e212fca92406331ba8df6d39c30ef1625462a1b0ecf3209352218c78597c43702be746c4c7c7c346a53e48c2fffa358a1eefbb434e7e406d653896dd143dc8026cc6e504c79f933ef3b84741b16957851b28b374be2556965d6dd035bc50bf7bcfc6ac22cb52159b7a7bc7e0f9c110675d0822ef7a9c69b90df2f172caa21fe74245d5046c80e7da00f7e32", 0xe7}], 0x6, &(0x7f0000000780)=[@rights={{0x1c, 0x1, 0x1, [r0, r2, r2]}}, @cred={{0x1c, 0x1, 0x2, {r3, r4, r5}}}, @cred={{0x1c, 0x1, 0x2, {r6, r7, r8}}}, @cred={{0x1c, 0x1, 0x2, {r9, r10, r11}}}], 0x80, 0x20000000}, 0x4c081) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) [ 1402.917292] binder: undelivered death notification, 0000000000000000 [ 1402.918286] binder: 11805:11812 ioctl 8903 20000100 returned -22 [ 1402.918549] binder: undelivered death notification, 0000000000000000 [ 1402.923376] binder: 11785:11810 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1402.940312] binder: undelivered death notification, 0000000000000000 [ 1402.941496] binder: 11817:11819 unknown command 0 [ 1402.941504] binder: 11817:11819 ioctl c0306201 20008fd0 returned -22 [ 1402.941590] binder: 11817:11820 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1402.981328] binder: 11823:11825 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1402.982932] binder: 11823:11825 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:07:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) getresuid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:04 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x81fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) 17:07:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x108, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x3df, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:04 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000600)={'teql0\x00', 0xc201}) r1 = dup3(r0, r0, 0x80000) accept4$inet(r1, &(0x7f0000000100)={0x2, 0x0, @initdev}, &(0x7f0000000140)=0x10, 0x800) ioctl$TUNSETLINK(r0, 0x400454cd, 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={0xffffffffffffffff, 0x0, 0x21, 0x0, &(0x7f0000000000)="3f006671d7af52f647750500bf0689ea010000000000f109a708f7829266b97cfa", 0x0}, 0x28) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x8955, &(0x7f0000000000)=0x2) [ 1402.991206] binder: 11823:11830 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1403.093919] binder: undelivered death notification, 0000000000000000 [ 1403.332831] binder: 11785:11787 ioctl c0306201 20008fd0 returned -22 [ 1403.361484] binder: 11867:11869 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1403.462935] binder: 11879:11882 ioctl 4c07 0 returned -22 [ 1403.472343] binder: 11879:11882 ioctl 4c07 0 returned -22 17:07:04 executing program 5: r0 = inotify_init1(0x0) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000140)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) ptrace(0x4208, r1) wait4(r1, 0x0, 0x0, 0x0) 17:07:04 executing program 2: pipe(&(0x7f0000000040)) r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet6_tcp_int(r2, 0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000080)=0x2d3) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$UI_SET_SNDBIT(0xffffffffffffffff, 0x4004556a, 0x4) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180)='nbd\x00') sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c55b74f8ecf3ffcc48db7de90db1e13a2ea1dc3ae1aaeb6379e37177f17ebd056fe9e67777ceca880dce898d3aabdc563137e2eaeaadd41c5d79800d11cc3f11405004c5198b01dbf48332334b1af054b434fbec401b5b5ae", @ANYRES16=r2, @ANYBLOB="00012cbd7000fcdbdf25050000000c00030007000c00020000000000000500000c00040008000000000000000800010000ee00000c0008008000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20008000}, 0x80) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0xfffffd62, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="609d4910bbff3453a8bbd805f3286099e6de33e526c0758465110de20f6f882a1f85f7db"], 0xfffffffffffffdcd, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x10, 0x0, &(0x7f0000000080)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:04 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x6}, 0x1c) r1 = dup(r0) ioctl$RTC_AIE_OFF(r1, 0x7002) getsockopt$inet6_int(r0, 0x29, 0x1, 0x0, &(0x7f00000000c0)) 17:07:04 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000021c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="141b0f34"], 0x4}}, 0x0) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)=0x2) select(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x5}, &(0x7f00000000c0)={0x0, 0x0, 0x7}, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x30) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000080)={0x0, 0x0, 0x0, {}, {}, @cond=[{}, {0x0, 0x0, 0x0, 0x40}]}) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f00000000c0), 0x26e, 0x0, &(0x7f0000000180)}) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:04 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/netlink\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000380)='projid_map\x00') sendfile(r1, r0, &(0x7f0000000080)=0x8b, 0x200000007ffff002) pipe2(&(0x7f0000000000), 0x4000) 17:07:04 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000100)) r2 = socket$inet_udp(0x2, 0x2, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000380)={'ipvs\x00'}, &(0x7f0000000180)=0xe) write$UHID_CREATE2(r1, &(0x7f00000001c0)={0xb, 'syz1\x00', 'syz1\x00', 'syz1\x00', 0xa5, 0x10000, 0x2, 0xc3, 0x40, 0x5, "ab29faa5386d854ff419634ef28be807415ce4e18498bac0c1ccb38303d2bc5271892d4de6f33e6a4661410bb7b8c42467a26a132d1ed463d7cdfba7a03b12cdd1ffab75a4ee07486126058c61213636b506ba4457f630aef05dceeec4e76d2f515e58aaf4edf4afef556b291591382573424aa2f3ad6bf6e4a4d03c0073b6bbc17d55ebd783750212f29627a428deffd41211d6427ee03d9d6cd25c3b3fe511d71c0bce98"}, 0x1bd) splice(r0, 0x0, r2, 0x0, 0x8100000, 0x0) [ 1403.820299] binder: 11886:11893 unknown command 273259872 [ 1403.828106] binder: 11886:11893 ioctl c0306201 2000dfd0 returned -22 [ 1403.836089] binder: undelivered death notification, 0000000000000000 [ 1403.856917] binder: 11886:11902 unknown command 273259872 [ 1403.862765] binder: 11886:11902 ioctl c0306201 2000dfd0 returned -22 17:07:04 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0xa00, 0x0) r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0xffffffffffffffff, 0x12, r1, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) fchmod(r2, 0x187) [ 1403.862796] binder: 11897:11910 ioctl 1 20000180 returned -22 [ 1403.866999] binder: 11910:11910 unknown command 0 [ 1403.867006] binder: 11910:11910 ioctl c0306201 2000dfd0 returned -22 [ 1403.867108] binder: 11910:11910 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1403.872594] binder: 11910:11910 ioctl 1 20000180 returned -22 [ 1403.914843] binder: undelivered death notification, 0000000000000000 [ 1403.923860] binder: undelivered death notification, 0000000000000000 17:07:07 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x7fffffff, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ptrace$cont(0xffffffffffffffff, r0, 0x81, 0x3) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sched_getscheduler(r0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$KDMKTONE(r2, 0x4b30, 0xf8) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r1) 17:07:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x0, 0x0, &(0x7f000000dff8), 0x0, 0x0, 0x0}) fsetxattr$security_selinux(r1, &(0x7f00000000c0)='security.selinux\x00', &(0x7f0000000100)='system_u:object_r:setrans_initrc_exec_t:s0\x00', 0x2b, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) epoll_pwait(r2, &(0x7f0000000180), 0x0, 0x0, &(0x7f00000001c0)={0x70c}, 0x8) 17:07:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) init_module(&(0x7f0000000080)='/dev/ashmem\x00', 0xc, &(0x7f00000000c0)='/dev/ashmem\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r2 = perf_event_open$cgroup(&(0x7f0000000000)={0x0, 0x70, 0x7ff80000000, 0x400, 0x81, 0x1f, 0x0, 0x2, 0x200, 0x0, 0x92d, 0x1000, 0x9, 0x6, 0x7, 0x9, 0xd3, 0xffffffffffff9462, 0x3, 0x6e5, 0x0, 0x7, 0x1, 0x7, 0x80000000, 0x4, 0x9c39142, 0x5, 0x10001, 0xe8, 0x5, 0x10001, 0x1, 0x1, 0x200, 0x8, 0x100000000, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x101}, 0x10, 0x7fff, 0xa6e6, 0x4, 0x1, 0x5, 0x1}, 0xffffffffffffffff, 0x1, r1, 0x3) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:07 executing program 5: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001780)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f0000001880)=0xe8) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000002040)='/dev/vga_arbiter\x00', 0x119080, 0x0) ioctl$RTC_UIE_ON(r3, 0x7003) sendmmsg(r0, &(0x7f0000006440)=[{{&(0x7f0000000140)=@can={0x1d, r1}, 0x80, &(0x7f0000001440)=[{&(0x7f00000001c0)="e4d085a57dcf74ace6cfd5ef3b1cdb2b7b67064d7837ca186f687359806420280ad0df0ea8b6a0668fc0b40a773c79fae4aa76ee0d2a0cf264ab9e844a77468e9f095d0afa115b7de4fec2db6d4d8ffd580a6cc5c6efb8e24343409490a83b997bd6d2d4190993a50152f05dd76bdeb7a9af49da7a7e82ec8bd025ef60ee7649ba60eb86d4d7dd2bbe569021c6301c7282e0a800b4565be856213bc5f4b6f6ff641348161e30913a9f8de720a733482c13cf67adcecf6243282534938310302ca95849fcdb191617061a63f4debed56c919ff40a798b4ad63993659163489a6f17f37202057cce0b8a0da1", 0xeb}, {&(0x7f00000002c0)="85fdbc919fa37a38ae09aea3c363295651ea594bd9b62787787cf0fd195c72773e120f5a08bbe01b9e38e8657cb9ed2b3d00a048759f817aefd7d1c44eedd4065255a621077908f63a25c98ee4f3b641bd53f40d44ef5f587b14c036087250af6a83", 0x62}, {&(0x7f0000000340)="3ee042a3b408cd45d56e8f89cdfba1cc700cfb1320b6555dcf244f960a70da4dc694bb7667174e65a49d31c44f9ecc2940af1095a88ca24726aaaf72c9dfc90daa09f431b552b9bbf5275b59cf26ff1f2e4e9e1359f65014b6754e7bae994012a9436c7dbf66432d36829f87035213bd30b5aeccda070756c374b9f14c5dc9e7a8b6d8a6eb19968aff52cd80b3a901f3e2d6924dba5ec267d61bc2a21f3460ca9e5bcbe71867722597fab0d8b598872122bf764bcd25cfda276ba428043e220b2ea07118a10357bc2b5d2dd5cc339f945341abe2aafc07fd6b87b397c36aac4d0331a9ff535b77da451a01a8", 0xec}, {&(0x7f0000000440)="4a42d45a34ed453a08acf58804085453ea7d34cbafefd2467698e1249b4f54749f6a0e54ef8a83ddbd81f14abb053501ef45a7d71382892aafdd334478a0da50e9f57d34210527cb59dce1172ca8fa14ba366bbc02fa542a26929df03d12d23dd308bb657115b415942842b758b1d992c4e51e0681579d36e4a45fb0e7f6846b142cb3d6117f1156a104a2605631b29bed37ae379a57ab2cf7b6b2ea03acac484fbb7f93036542aab851306e4002935201a738327ba3dc99875c8c11c206327c76e8ceed0586a64e92cdcb43dceb840035f0f121b973f259635d389cd0d25d871ee648b6891ebb664c9be9339a666c28a90dde8b821b3d619860b42222afb7ddae528000b48961fcf12da79ffe64b8e15fc57b8264e290089e320246735e542d0a1204ad479fedeca2e80f1f36aaa95c308085ac8dd7f0ff96aaad2f4a5b4daaa170bf96afe547d81783e3869a1ec2e2c9f1ecb759ea930cbf101e9e6b21b63e03198fe7d0c3315d9d774208742d0cbe7bb34b5f1979e3faea03b8cc855453a502d1e0312737acfa0608f4f5ba58d1d232a9e7293d28cd77fb3e3666aff4fddcdc9c4744e027faf352a16524b4e275b9f258afb148551efda0e0ad893e6602b3814f464c8b71f3f050fcaa08c05b474526ba554cac6ccad485146c53472ffe4130ea9fbdfcc07b481dd7172ae82d9b442fd4beeea2a3b546669f6969e643685f0a80a02b46e0dea537b4235641560f817b0a1d67191bfb8794ecdd7f5497ecd9041e3bc74f89b26b300ad62b4bb1805f5caa841d4e4bf7a9170016e5ec694a3daf722b685689deed6a1e5d44f2b5089aaed31abfea0a5d211d31848bacdcdb0c249d4c21a59f259cb8b59822a7bf74a1bb38e43ed6a30aa7f57f9bde57c8a2ab2889083ae99d57a07bdb4e74d1bb5642eaaaa9f4b3b0625bd83a4d6c9694a8bac8afdd082f65f42754dd56620faa09b81248584a3f35522186f091a337861f49c2aebd21c7fc6bb326e297063b17f9c6999f56c7a329a8d895afad92ff44c75c72d99067cbbec36cd82775c285facbeb79df223914a8ec72ffcfc21bd69475ea00af68c254e54e6d98960da96c7a96690742b21bcf22796501c4c6e55d74d386694af723eebf6a8e545f2fba6ad99721c9f540f43b42e215c969a6a6fda9389f46a4610d3c0ab244450033b04b5891f44b8efead8493eb774d1f4080f3a992b7ed2ed4ce484b074e4ec4d183f065be3ad1a01fb00436a8c4cebbfc0b80fbed7fb4c0e62cdec38fac8f059ed2890124d22cae359511d99cee4a280a99cf1e65f8b3aa4158dafb887adfbcc0e78b587772acb46737f3c371b437727bc183c6e80dd2a12f290e7092f098c8f906d043459bfd0d0dd69aaaf755b6deae1d5a8ebdfc977ad07dfe4f24aee189a567ead017f9055903ce909836bfab0f8d24b682d6a888c12402610e9c3f1465f476fe4c4e6842af61b01872e3ee4d45204c106e2d17b94d8e3e8dc213ca62abcc8641a4b9f940bf96a490b994efa3c0b277e9681ac80c68b33db5b68bffede0938ed398ed6874049304b0f15118e3ae6919f4b3b79b74ebb9448d6238232b717582d6032b0dc10a96edea44d29c3b2c43251add3ec2590d676f39b6a1d8cea5e648bd015a492a38de3578d56da7ada5ea8a3bd33ed44557168c1eefc6070da86dfd4ed8b914cccd692b63371ca6ab64486dc466659b0ff8d60cd61960296ad0952280f867a446b7df05cc1817876f34a650ce72ef6e240547f674f24a723105527fd8b1d1a8a6416f842e61abfce82ef63cfc928bdfa9e362333384c08a9c01719dcebf3be8f0e10b6337b32f2230a6082bfd1d95101600d028ad832509d0e44b5b640934c7b70f143267359ba87a0f3dcccb09012bd3d026616253256c1618823771b55494a72ea2c8e5a1298aceaffc6a234883ed17dcc7e7e9fe5ee9aff157d6938a1dbede2706896707c73ae7f257d2f6aa899557b82e84ad54d227fb6be6aefeb1ff08b89901a2b11ccc6a42744be4f1f5a0a0ed8c451a402a19b2a7e05636e3cdc88a6343059a1f096714264e2861a7e08fa642a09cb2776b866b6a7de738d282a1373b2fa8da437edd2fe466dc151e6d771b652ce3bec95cc5a78d0d062f52f3451b1c5a9a58d010e0959b3c9e229e3eaa8453e8994a7fb7db8ab8a915829573043794111a56f6a539f7fd18c2f563b7cd0d8a1f0a1ad3c9a3c8eb29acd96e42b9921e23d76bd3a4d9dce87f02a6ea2205cc41888d13818be47c322077289ce2030785d79fb6fa9912d07ba43d39ba475ddd55cb3104d782e13defc226fab672b0c69d798ddf59ccecab2ecf3d6744c1a2d60c6d65944c7ad229e5b4789877b0a3c954ed5cbe3e414475e7aee2d017197a0b716bd7b6593d1cb94bd5031e7ddf5d15a58090f60b9142fc6011fa4aea9b693d751c8892fc582c93859cd0fe64d3ee50b1d98d86f64a07c297aea202161145fa45a39fe290e457acd4cbaf991778b7a25343625c933603724d7898420391c88a7232e6b8489618ee3d093aedfa58527651bd13fd819c5d87ee0017d9e8fb0f14306a1df17056cea3c8923b43edcb5b13c46a25d733eb5112fd917a7b4c5db1dd9765194b5e1e170ae13affda57bbcaac0db10cbc742c87cdaa285c74bb28c1aceae80ad23bba23aed2ed410cf9f6304dbe612f69b707a411e4f8ee24184c83c7c66ea23a627fd6bd907a2ba171798859e6219fcdcae7224c39238044a178dc769a7a4ebf1263ae5a8e6ae654856cad223a1433bd5883c7eb69473f266700cd75f16c677af56a7bf2eeb8e78dd4075a48647ca5ef9ac4921485dc6fc6a9ee684508e05e3adbc971022d7e5da1b41519fe94464551ff5d4f99201fafa08eb719a42e995ea286ade8ab53a3ae7c10cb1b2bce78cd05c2b0aa3f3c656ae1cd89fe9516ed708b680808c704d639e95c8a334b44d94461704e86b309a4a859b065e7c040a828ee34f992de2003c1cc6f9178cd3832beea5b3fb3b347805d9e1802401e94a7fb8c7350b74076c0abf2e8bf5f55bd053e017774b121c794e2a5c3c603ba6dc97b02335bcf8f3a90d15c67d1dfa1ea9dda75df3b5bbe3d922016c37746cae174342158ae64556cb04b1d26a47f614e3931485825342afecba3a19ce34903ed6b180a3f3ac1b7ae9041f59818c66aef7f4cc147e216aac22b202b4f76de66b5ca10f26a6cee78c9fd75e6774cb7bd33659f9c7c1f3f59b10f4e74bb2e208b696bfd9f8e1b169b6f233e2d80eccdbf25be8f6a34c9aa49bc4ded981779089048560ac95eef4330db0c64cfb4bcd9b06ea47466d66fcaa076a7d84ffba28478eee3bbd545c8fa5a7fb93dbfd168073b04a204bb25386ce057b946c45d371ceb001eeb0780742df1bc816d57f66b7891dca8a47d29d1d7a5418e9a93edf7d490bfdbf6af58461779b302d7cf701ed9c82592a0aeee846ecc21b50b1eb918af770604e83894f6463df93c6d78d28e23547bee30a94ee07b0f7ec8240645e8516a4a580c6c027cd4061740d79c97cc3107641dd4d011e34ba5af9cb459421bdf8dd991b9ae401da0a624eecd91a4d7d0c5875597dad98db8279b4941175f53c352388224b1ff2a7acdc39763d4e069505b9f9d285622550680e2ae4aa62d4d62bf2c8d3985d4b0bb9801a3dbc2a071c16d0cee45a58ef004c80c4ad30dbd1d02e290ccde502f4771f81ed3488c6514a018bf3434ba3295611b792e5acc77eb0c35d462458a680ee3bf83053656907863ea63cd24aeb72bb3695727633be1f4008e7f4c340c853299db7c7a78f61e20431869043c67fddefa211e5b5b883557df19704d81d5a781638fd0e2817ab032e6e7a9c5ee447748aa8dbe56da867a12adb8fb767ba4f90521f2cf29bb0dc6a53e0f6f885984e0b49d9b9bf9e59a639a879ed0df1f072be173863581f81b2b21bdca2ab30799ea9bdbdd3944049109eba2b239bc76f0893de225d8e76768bbdeb5118c69cb7dd6345479986738ffb7296c3ec6b7a86790e30cb41024a4e3bef4b8513e784e8067ea5a7dc322cf2a397ed777381de0af127c69cdc682314a5a75da35472f685b706ea123076c4804ba86a00a84bcd3c2d64830d03eb85bdab844aa32f464cc7a5412579f0d709d4dd09908ab416e97829dfa5b8f75bcf717f8bba46f32f3b20a7b50d20f8254ca7399a29832fc24d9822ff73879da5b1a2df03c93e3bc7509a70d1361ba4916a7deb2cc1ee60594cc6fb9a53a670f2caed0f1f2a48961a0f3a575d0ab628069bda8049b35feea6637b1cbf72e519d73c956b93c63ac31718e0e8c99ae943b419fb234da98c3ce13ec9b9030d9d419a6bcd71f2d3f1da06a65c5d0054c60eefdeeac510d49ff6a99d5cefaaa3b6bba6f04cfcce831d05b9b87ba4bdc88bc50c57ee6ff9e8192e2f7268e9d07917e6b91b3740209435fcdcff8ba3ccba305170899909d1ec812b76ce06885ea3c65ba6b40296e0be13fa8ac13f618dcc9127f895e89281a03d6bf2de9a02a0fab5943e8333dbe9207159a87142573a1c368da48cab535fa9d343c1144e252ed48f1e3cbe0308839bb586730df0b179112b1a834289219fd72674502ff72b5f1d3e4c07f6c385715b781b42942839a6c0e918e72688fc5f28123d595ac79d70fac27ddf860dbc948b39e0227cd358fc5194cacf9fbffae9856d3fab346368ff0297e77bdbc4fe41ac14189bd5864e43abe972bf42d36e9cde53a941c0f5fcaf1f81c89a90ab5528f1cb888c31eb6829746d6659f0a676a548702b07ba3b39bbf63be3d48e1a908bc68ac45ea91112a79e4cac27022bd5fa4bb7d1b43bf81f71ff07cec7e71556f532f547c82eab79dda64d4ccf36bf852da49a8f75014a3d92590d937236c1c7ee16c414f0dad518b848d6f7b12126cbc96093f337a3626a2dc6f89ea0b93242a102fe564a56db451f310505e2bd09bb628433f143af3b5544761516a040fe0d6c32f67cc117d53850d91e0555ecc3dd160c1f8ef4cace07ef6fc844e868a604a6a62b417889f28caa91e2f7ba86cf97d627ab0c3dca9fc2cc73ff3a8c726ec3b417c1348035a544af0aa72941f9c6e1c0201c7d6552c11091ea1cdc3d9c41f298d5646db88c185307554798646510f50888e071fc075e9aeb1e8e3492ff5c4a4cd00b9733f89304c49549fffddfb1584a08037bf32862142034efe717e4742ea9ec15ce780089087447fde79db2bc262b85299ee5250e462d8461e44d0c238e084aba5437e0a608062e2e19eb60a6cbbff734e39759b4b591c03f9002f861475fff5d70e2b3473f146e18691849b3143f323e751440ef29f8d58cbbc9f543ea69867ebec28300c921d5ae1dbc88d37fbda9aee94b6b2a7633066d4c8889b8bcfd8765b7f04722082415ed6cd183bbf5ae79f9ec65b6bf116139a01fb5cd8f43339bae1e0a3e8c18d3f79e728d05a3fe9aea8c11548750f451ed56bf10157f383d484b5f119d9c67d17af30402c688a11aab02cdc87019894dc9d3171e6211b570426912fecf504afc7fe95dd452ea35dfaa1fa6cb975192076c7cc5cbc2de02f45e209f417966a5b009b79f29eb5300fcfd95578f7e0d3827f60088884917d527f70db5d0c08d37ba8afacbe4f372d8c68865c20e732a51fe3211f2a7f60122824abb939ca87c5c43ee7c56922ece6b8317d111bcead2c92e2c2ce0402d90a8472489f6a3cfcabcd046224be2897a719f0405f3c01cc0a3123f7920448e50b19671be9fc42073e2cf09fe1e7dbf55822d917a9", 0x1000}], 0x4, &(0x7f0000001480)=[{0x48, 0x13f, 0x1ff, "10bde52764f92dcbf78f1c7779ce1cd4583c09ef91e3eb38b13003191575d3929cfa1cd6fe2ac9be3e285445cd74029df957bc"}, {0xd8, 0x115, 0x8, "b47bb0cc42b30c19dadee09f7dd2b4ea6dd8e921cceebba75d04316ae4d90ee9fdc70ec009cbe85cebf92a49e3310db95e20289f88fcce5f52b7bedebe6516b4dd397c1049d7f8e64eda93e105e0868f9bd2f5b685648cf9dbb413dcfa8d21f99baa177fef738221fd2595e4b3a85c6bebbfebc9c9123c5944b164d6847a8d6491245f347012c03caa30c53cc2d70c36f1bb205e841322a7f58160782cc59584de46614c6d130495480fb4a00b8cb6555f978e615a2fe99f116ef06b5817b026d40b2a1b5ade785c"}, {0x108, 0x13b, 0x3, "2098820a9e27846365f74de0eb5a63d16cac7870ad0a9e08aa2b863aff2a83abc7b365490d01caa04c7874bd7b991b506816f28ae69b931225231f6dc6dfddb50775b2d214d837b4958d559a776146d5e378b7441b188d9a233273d653dede36da5d42ecae1e67e6fed238e7a6b6382d0e8bbb41d0896f92f23cdfd111ede6086acd70f5ebe62c71b57c90d7a57d83fa693f0a5870d79b888db311c338f5b63fdedd2a05c42a96b15182822947c9648c2ff8fae274a65ed0065c72f7e1b3d01a49c03bae17bb33b26a42fa8f9c0634bfe1f62daeece0b221b66c10ec812f8e332e15a822dcc5b746ef1fe75d539f42f553c2"}, {0x58, 0x13f, 0x3, "fdf3b3ad62b1492f29248f67e39f66c358120e51f5d5b491848915268804ed33c467f0c96592a2a8bd6be719737703a288ba6d646531c854585a706896565933dd52ee43"}, {0x80, 0x101, 0x80, "e692a367f22ac11b29e847342e036eb6ce6df329dd09ff989c6b40f3ebdbe99bcb90a4205236e4d9176e3644e937466eecab14c4f900e348ae0f72bd9a17df8e65b2a394392a586d70743c49e5858654c1d1cd03dd132bd80774e9f6374f1072ab21b14498c3dfe6b6"}], 0x300}}, {{&(0x7f00000018c0)=@can={0x1d, r2}, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001940)="01922d9b950a09a97a01acbd61838fdbf5b2af30", 0x14}, {&(0x7f0000001980)="d585212231ae0bb02765db9b3a0426d4d9232a3abaef54b5a8cfbe5957ad24e44aed00d884967ba28207d6545732a9a755e924ecc1e6c80fc52512e73ee568318f15cc7be89b7b941f97da69760093131583974047822dbee398e5c033ae5ad4b24de287dfa87fe3288fe1646e64dd0c6973efb7fd1e4ad1ec07385ed63a8bd7f3e63cd82ef4f1ce9877d4a4bd", 0x8d}, {&(0x7f0000001a40)="6c0b9437545d594729c070ba4cd663fe09ca570e5b66dbb38bf1790175951ac2e8a97230a43429dd14ea6a1ca310b18c8dcae409b8f92b15b0ac3ab7716dc4b59250dd3521495951d8e971a64e9a2886630f6caf4f8d11e97028c11684da183f04e069f83fde14de2f98fbfc6da5ed7ae045028f5fcf25bc849235918c5b5a6fb86b3772a5b3d8527a8bf20b9434e79b7a37f330962de7366979ea071a935b3ba07da06a1b7e2517a9b6", 0xaa}, {&(0x7f0000001b00)="85e19687080bdb58d1d2493f535941fde70744f7465cbc9bcff9ce33618d2e2b74553cb0eaac6335c9baebbc0045621fdb3670c854dfbde223a57397d5f292ad9d8e019bd1578f1ec0765c", 0x4b}, {&(0x7f0000001b80)="0e1267be15ed196f40c561b958bf61dc674765214e91867e0b3bf7e613b58e25a283a02ebd6e7161ad688e432da2cfc75bd4e3d8094e3aaf439a8bc7cc4406142b38cdf9f9c1bbcd53bf86661f3e8db53a500dd905a97d2cc6d1edd9fd722a1f557f66095fca4c47b21d3c3926ad6a28a45f32e98bfd9ef74887a491b87268c3546add1a2ac4c5cb88e321a1f2c062a5606994d04365efba48e450d58997124fd1f24a0d8775374aa1706fb028ef1530542b6eb10f33e340eea754303a193ce4624d558e8a1089b4c93cdc61ae3ef1038a95a774ddca18698d6aa78020340ffdc73352482e5fdb2467528a7f63ba7b599d1044c0805ec82c64545ec5", 0xfc}, {&(0x7f0000001c80)="2a4ac55745e3ebc0bd1975e6d03b82f1263bf37b994e2bb99557dc41f6d8f09acb5368da7937d129c6c68e69b5c9ac9b4e5951de75e00a50f94055e7726cbd833335c0b2ef417d3df1ad61e45cb4d37c65ea65c4a4ece0fe94fc47b155fe961332729e32b746113db581232a35", 0x6d}, {&(0x7f0000001d00)="e56c2be3641229225ba219f9f0c517276c9d3a7af4d2346fcf9c7db082a5a2dc8566651b6aa7f5a8ce83810f36519efa1a17ce2e4a62934225dc913ea2ad7308b99e6b1bd17097e1e7992f82582050b12cb42e43aeb5f09cdc7fccbb325fd2153851073acf6ecf131814986198e541738290e5ef172c48018b0e4142f9faac261a92fb1aedc366530bba943ac0e8dca58374306b7f60fefe3248e27a766fde412575cfa6eecdebf79b15ea48300f8fdb332322fbc0909587753027d6102a3a7dc8f6c7bd162a217e8cfc8f495472c9f1fd6e35884f3d34ea0edb63fb5a0941b016e1d3", 0xe3}], 0x7, &(0x7f0000001e80)=[{0xa0, 0x105, 0x81, "775224da91064f3e5a5e01091560727b79d8c08049cc8f48f178093eea91e386690c5aa1d2848acfc3305d279294df8241811283420ce4b26927457dc6acb607bd335e152b63c2fb8e0ae82f75df54346a24a733f3e0c008f7ca6a3c15d8935e3904747a9cbdde9305d669a8068b78558be618cfab54e8e563245e73a4c79569a22f226494349a9bfc35"}, {0x90, 0x10f, 0x3000, "1c03496f5f16cc910dfbf70ddc09a262fbb0f57c294462b0fe0cfaaee2e17bb3433eedd99c13b48fabc3a372cb5d31ff56a0c0d7f24cf76f019365c8ca97d88aa8ff15e0d8a7f644393844fb4810ec760546e6df860eac0fed238f0eb3f508ad05614e62392924d5766cfadb391932a04ad0ed42f63d13c22e190c7e"}, {0x88, 0x117, 0x8, "9355d65a2ed2ea85e03dd848813bac237dcb25aaa3c9e415c81542f370540180fd92134d84f9514311a16d82d74af529f8bf43405fe7c58911c7d39ddcee443096412c21ff6efaf8beff8a1c6887a4be1880adfec62ebf2ef7169005daea041a23846314a60315804cfbcebe99ca593d031d"}], 0x1b8}}, {{0x0, 0x0, &(0x7f0000002040), 0x0, &(0x7f0000002080)=[{0x58, 0x0, 0x6, "e0daae01c43f99c6996328ae7a3943e24a25ff8265b3612ac128f290976b501fbdba94ce7286a4e415abac9bcc01126fb458398a3138e383234ab8e1c4218b340d56"}], 0x58}}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f0000002100)="ca401536d352c911007a1947f789b57097bf79325506ac37a931dcaf9802179ce2ca8228e61d97e5e6d88a274da39e613c2e79b37b088cc0cccef1ac7e147777228da16a7c19d1fe8fe51fafa09cdb834e726097", 0x54}, {&(0x7f0000002180)="31582e2105ac0b952baae891a8fb67d64c0dffeb8ec0ec22ce89f4915c69504468521d4449744838058aa0931e25bbd47887b9355feaffde7f280ce4be3a0b2f8ddcb10a2558c39fb03897a3891df6e8cd8caca8926dafcc870a2e2cd3c52d1c399227053be2694787cc224a4d61f986c739aa45ea179dd3f8009dd8a24a3818d7e7208ea789f12cb7b6a741c13beb533583e2180872", 0x96}, {&(0x7f0000002240)="8744cd112f019cae6cea918de379", 0xe}, {&(0x7f0000002280)="4800ea5ee125d4a46d6def63af9e6261a74ab799cf02be8e2abf7cf7f595af1f79a1f4e5994599114644903e44c6bb0ead28b4273dbd57bdd82481964e37032907c6523d2408a1a0a476e8f0b84cbb736b9d8de0825fb7de16f4ccbe8ebf6a9101676845c4d1e594925845db23778f", 0x6f}, {&(0x7f0000002300)="c3", 0x1}], 0x5, &(0x7f00000023c0)=[{0x90, 0x1, 0x79, "df0462b4ecec84ee721e432474fee8def28b71984e2a4fe2e808496fdf1b57708e206a5e89fab38754d40a6d8bb4f32c08f88b9df47be1da31a2e4b0c16ef48d0677c9ee25db7cd287ed006c7a0f5b6aff38929290c8f35baab3e40f5cd2821c055f4608509985e6e7bd67b7e84348bc822bc5560ed89998881c1ef3"}, {0x1010, 0x116, 0x7, "bacb78571c8036db1e5a89b619b11d2305af526e322ffc7638c68956c4f1dcb14de48dad252f582056d7110a386036b80253a614b717e328db66bb49f5b53aac72aff66356ba7ad25a4ee1e98a73c85915f8c476188b5b0c17fc88a171dfaa936032f75deb5573ff562a0b34bd6ff1fb7b177141f148f2bf5a598a0ce8e1df2b1e9d192c8ba3ef50425dc62f5b0dee75b9bb759af032bb9b968c8a486fa54297de106f9188a425f32e8db7084d900190e228d48c01df9f99359c84d5035f61ea027acc69f18f067e4a6286e970c80e5778f9c11cfc35397105afee8825f3670a188129ba94b3c28f84de67da406b76962c4a8f0b3f81066821daeb469f22ae239b84422af6cceb7b90450919a4c588a697e1d1b33985c7bea841a4d7181238e55cb0f43c86cf02f576d69e2ca0fc0ab4996d733436165c0fd7fe19d34624b36c3ce56cae87f032f1af2034cc78f651e9195c408446cfda3141a24ecc476b989dfd8266b4d9c82abe6ebf46403a40e168228bf17455e1eb221ecfccff1a56b48b0dc15b0180350eadce08813e34269e37e9f6c19ac2d9daf27a4923186c801590155d315e8ba97f760f01291729f205fa75f4043c4f1763908430f5204d1161e62474801a6824572fa1199e471e4997257807b8ccbbe19435cbc6428b4c24b4fadb666be06020a9375ae3a27af9bd42915afa6931040492dee6f56c87459ff47049b49f6416ad0cba5b4ee3e4d13d17290476b6e40ea68d596f1d4c81e293eb63226969bfb3a500d7191240dd69aaa300d9b75aa821962cd57893dbfd73a84da3397f54309ceefe9f57938044989d328b05d46e88cc7a7649cef5ffcc38e5fb0bb491b35d047dabf88bcb59687e658e9e4c4ff198e3d63e6285f8150b3217f22e4daf3816a4ae0142fa30da0560500fb7deb3d61218635eea14895176f46ed311e6e05a18553cac35415c33ad8c35d92b89dad44aeae7b6977297a39bf6d386652c6d52f091c317b9bb9065b28f3f0dddfe95b671625ae3b1892b268728fe74b5c291334370aa31d79291f69e983a996eb551015c121bbc40c3e42c12203c5420a1ca8bf2d62af7c16b9efdb918462fd6981e41a043b5464257e024e64433271aa4d1e0a7731525d7bcf607bc49f0ea645de48566f4ed170586089a65d0d0b5bb820272ee5be425b0b3e06e1c69e93e7aeec98b94b1a256207a43d9206747c0ce1047fe6454b8f5078fd70ea392c08b92ed8644ede3cc3b533a30a2727bb64aeb4e418c7868e6ccb5382324b5073ccc8b9cc0e36f2c00bdd8401303202913bc4b9c4a615e034b540d0a4956ca6d4657ec6d2764a0e82f6eeed890297a1925d2d6aeef8eae1214a62457b9d8dedcd83ca8f11de1a7d17de6368987907f0843ca1a9f5a9736a77108b2ba0a695aadc7355eac842cf51d4a9dac21b6aa621faecbafcbe6b08c059292cb41edfb55042537c914a606db0a39bb7cf161be4acb7a2d544b1938a9c59ae4e75cf628422fdb589f215c9e9b89084af09eff8153e1feebc5cbc8c4e5879e2571e929839422126210b5ec3477f2edc20ba62067b3bb5d59882e8d2da141be5db26f5d28ab5d7f70c544c62c0d0ae2126524db59f1367e24aefb5745f893e3a355667a0d0c1d1eb623a3a8e9ad0e94bb44481421985e55df060bf1f07f5d2b9f156cc1589cbd5b9fc2200ad32ed97a94230309168eb068510c7d2184691e9328fab931f8a7e0a7c31f26a088728451772b1d6cc40af6ce07895729348555d3bfe166638df0d018faa9cd756db09a055b1d3b0b815ec880d91b3e069d8232c97fde0854643698f8d9548aa0319a73bc290463e589f2288a8b63366796979f21f2760c56134d89d8572be9018b9b04a94c6d13827d5140a4901b3154a00e45badfdd81949e1a8e7a6ca017cc25d70044dee855153ba3d1773304da41df0aa2eaaf2eaaa3d980faea34f2a66f2e71568801b49393446cde84991597256ea0232fbacf5c2c97a3e220e2819381bd3ae5aae92a5d01e0deddd2d939261597449233456f24b6318b819dcfcdcf9685a222b44c1a5946e1c0e37e2ab00a1f6f28e6cf8124fb12aca94f3bfb3f93c10e67355ae7622a5ca4735d2a931260b218f1585006b04f4122cc47c25aa4493b99618613ac00f56a84b6048d6397f32fd470fbef13656692d6efa4206c4643a3a785b2a1b7576e31ce7d5c6bcf8844184e44af19e181bd3cc365ca64337c81170e671486577cfe9cd61c9154f2f6858138330c0c5b06787ddc2b1975033da05e4abd59e36601942bf7bdc8592a3887c7582a69920f20d6516a40c8084048aae01de9435d66a08f68eea5fa283e800cdf19f30b3b705dabbcd573473723ba7136c0f7a86e2058cedd7f79a1cde6ad4a576644d90a1bd354e09503f140e38e255a8d8a32553feb908c69ece9db26fe5bfd37c7617f67bb7782f23e3f54446f77362c7a0af835a6ff5403e22873eaf797d9b9a14bd9af4ddd3868c191144e36bb4a60268514954ec471d9812126c865953abaf78c262918c14d064112a34f83a2c75dadeb9012166e7d218658f62de968c80cc519da9b708967d8af251f8af628cc8ad3952645feed8247b933d1ed8aa5b59d643ad467bee08b8da6348cfdc06cf331d338672a9612fadba5abf29141433de07d86d9c26f55f86290b6a2aeb4d8b962cce6939773055f4393cb536c76af4078bc0a36d373f6a3b5787d51532881977a1d9c58a983e0290d1618d852550f124405b2884ba1ed6cf80ef40e6efe7a6f2e6788b7f371e88f84677a2444bdd004652f74e183e98f6a0c64d71dcdcd6e8a6e8e4f6234fa4ebbeed0c2d869db94e6d64faac4c791d397f7e6030af57d7855149e4c35030c4ebd1645946a4d744c528ff359cb84b905f5fc5b1ff1f498fb1bdcddabd940835fa20de9c03c5459a211ef447c6db40d291b2670c15336c1ab7730411f003dc6cc2eda36d9b832eba940bde3239cd7943f104e8e7c8e7537c53f172377e6d45c28644291339823f1ef40632dc24ccc9128e8ea80c61839d5e5eac3921e3e3130a02475befb862af2cd27fd11e6c71455afc9c50df7fecfed8ebea88d4262b3d210cdbf46cc6f48d9a9baca862af85e2101bc54278b1b15f3b359cf9ee91989dfcde52ac1681e47f6c5d39a98fa98d8c9c253d04c6fba6cee9eededa88cdb8213517e0f068c169ed9ac877e7ac9c0c0dfb6242f3607e693db1254de7fbdca1d966f531099b3e9b840d4de9aeda8680858ede4c1078577f972cfdadcc14899b714456fe2e53645f0509633e23e5c1394b70551e04d3d04accb90cf8bf93db113b4622cfe4ee4ac4acd9b64187c1bce4d1bfe35ef6b4a28efed35096743f8b9eb9b0519926fb544f30b718036a449a1ff96aa2ea65434821bc5b84cee4fbdd5623b0e496e4276f402a29df1afdc6dbaaebb9779d39bde867c53be57fa92382bc602d7f783f8dfe58975a32b22e362a920935e9d73f3d3c930b5ccdb8e03ee548e711cdc62001a1d5d583193d75677ab88ded83075e06316d320af279f812c910cde2905e69ca0dc311c2f16a9f8df604f79b607f68c58e03f1f7127a41bd27244a008c43a480f5a3ba2ed565a9008096b0b03676104a822e733af034623a59cd9f0e8724b3b2bca35c977340951a3cb82467e52d3ba0303125eda04c132a1910ee373f421a325a6e040b1661f35be0542e64c59130159da29c222af0365b11fdb9cd9147b83d6989d3b3fc4fdc10e7c72f0910175b161a9ddef264e5ee27d89245e38b718669189dcbed7a7916abc72e38c5635ba3095acb5ad19ce33cfdcab817be972afac53117126947c3a1d2e0fc005132585ff86551c4fb4ba4f9aca360649f7a02ea78bf6ba1ff63008514fbbe5b759065c291854f24243f426f594a8dc28034eef70668e09a047ac39864940e7bca7ee13de9b6fc9bfdad8a4ec5b92335f46764ec3fca0b9e9da3caecf133194455d5cecc664244eeefbbcf443aa92e939f02d29c923ef18ad064a9b40bb7d659c44b8bebbf598b9d3b664dd962c25dfd4c48d585fd0a1ddbfe5597f8af26170c508a32a2989b982f29590e6dd00dc9bb2395df3c7eb121afea1bc9daccdb977c9809a1b01fbcf0b6c161c86455ac691b85f74e7abf651fa7322098cbbf512412ab01905556a3d556c8e63a1ce1bcf2745b954849edce07a5011324a4e9d2ac67fb1d8defad543fea730fbbf32d719abc61fa5953a447a608ed0eb5f983cc9cdb0779df46329a7bc736ce47fc626b2f6f301c748d31d1af69034f3d094b0436473a2d6e9cdf6e3e2c8f8413e71b20f43bfb32be7f2c424e56cebfdbb06967b2591fdb96a218d2c5686c4683f9c23a1a3b022c05d06e3c17d7f82d2136cee3271c269650d8de0f70fc8d5a6ccc8d1c85b8fa22b545e9727b4e8ea605dbcf77b9f96dcbb1ab13f0fc14ee68a7452fd3702788942eb3984c45b6f49ef20eee76ce79f1a9b629be9d346ca01e7df4248a6aa5f3bcbd547cb309982a11f6d2a10dd0c100b322eeaaf09afd478e33b2d4c03f6b41ed2bc2bfc4b7e07d3ad9960d45eb6739fcc56de7805a29c001497fb6e79c6a0942c5cb492727f3d6c2dbcceaf490a3dc89456f6e4226986dc2ecddc21602805688f0486ed0666931afd4f3b380a3e4d29bbf8de7fd2c70f5f67c2ad3f31bf4de551833dde68097644325f6d80721556e5392b6e47e1749a273a98853d9cc51d322c60f618484b4cb7ccb98f570959fcb77fe9755ad604c073a9c8a715cb5b741058d6741ce99856740e2d1509b984037eb509efce61e78fc08e4cb84f2adbe50c2a7e1651f9f89b8a94598784917c60d576094f5ed2b3572b3e33cb80d0a5d8cc4365858a02804c149d279bc0ae43ef17fa87cbdf84034fe77eb59a50f0b2d19d6491ff8b8cc8952ef86e2e8fbcc8fe5749fb45e47e3d1397b98b993c6f11f0d0929341f0930444599dc164b5e542463baf2e57849ddf955af2721794410269b1af404d48de958c9068e9c2ef638ad91f6de56fc34272f4f6bccc6b0b5f4ff7a2ad5ad4befa23d941a9b65fd706b17026c44b5880dd0f3972036536872c3935fc7a736fe8a86f448586d3d44f0a4c3cbb27908a9dd4bbb7303793e0414efc5bc400520690516739b4443d79eb793efd4af926cd58feb19098b380df254c78382e65a8cd14b4cdd38c7c95e23475bcd99f764b0c42a880bd04c9307d2927429f21327ced11dc51352a3faa22fdf1920f3edad0457d9aca56f3e065f9641c3de51a6c591ff3946deeb0443bac16ef868e8cb815d10e4cdaae20a24a6c6592355241438280093fee8703b8a77205240f2b8c332e7c14365d052b39e0090b60447e1210f7f9881d1f80b4c71c83f4a0510d9ce099ef56f7b30e70cb9636c5e518a9abdb98e2ba414945a28f1ca0c9c2d3efc3f98bd3da619723eed8a524d99ea7459d8278deca001b7c662ed11580916901c952715892522f4b735263f5357810b5ccbfad7d910368d6b58073cbea809b2516bcded2d95860c6a176f17daaaac7244fcd3705356275f6c3f72101523aa35d7159d4efaf884ef50e2501d27ff992ee05ff6c64548ef4378abe5988868324fa1e0aa8d7c3169dc5dff3e7c0ed5965a368144fec2f15f13e6520f66eb2e91fbc9a235c2780da232e7cfcfd8ad7f1d493b80bce67ca07e865437a2acffee2f20ac84a92e152bc971ac536832843abfddb6ef1b9b97e958372a353d4a0b74e4f5c7899dcd67e8c6d06fe6a616c73a672ef712edf257b1f8de1"}, {0x108, 0x108, 0x8, "a7217d61f855e0ff2d295910dab3a482563a7c66dea5f0c1af3d5b0a1ce4e2f5cbdafd7ba995756ed945655682fb1bb009a0b93627debfb45d145258c0512f22b12e71c003f85f9281eb7f2b3a773ed371919dccfd32a27057d6c8845c1bede89a25b8e2459be7f9282da82d8b6f9fd7e5c9bd981ecdd47ce1f951dccc364e15968a0a380f46256e1d9f9ad683dee8fa701138282b4f51091c6cd2392c56b09d8ee2a7eae1a589f1e5ff1bbb2a214e2242f171dc4eaeb0aa11df31ff93cb73090417110f4ac4ed2f73f753f64182133d4537a4bda4f2c1596f58811ad6ba3bb63e37365349ec7652094d38bdf5336ac9d1b9"}, {0x110, 0x6, 0x80000000, "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"}, {0x110, 0x1, 0xff, "39ab8e1af61a48c4ee69308ded0b76edcaf55bbb1127ae204943ab32a86f46567ae85369448e1ccfe3da7bfb7430906952e536368725fe4271960cab1391cfc343ee89a128b59ef8cfe1799701c5da6f74153ecb3d2e857086681be15ba42c38f5e108e948c81807328ff5a3ac9272daac49a454e1d0b87286cb4b0d9784495ef49a4e7230db5c31953036b23d4392037483ee861e9e3b312fee1c1ca4b43c33d41f0600787c906114c492b07c67367610e8c32b63499dc31e7398ee3940a38c765ea547d191aebb14ddc5fe5f7971b3cabfc7ffbf9dcffdc02b62e09667fd81a17ce528f16c4b22d101b50336112f1e45270aab73ef21126a"}, {0x108, 0x119, 0xffffffffffffffff, "ce79369764342a432bd3107f97d687593ec408fa7ac48234a397f22287fc14ba48ea841f01178ac5bf70eda7ea131eda15c2b4e79de9b994b6b1b368c7bc9bd1ad89917237ff66ca7675e54aa02d3068a7ec63cc1654ca16783f88c5c8e2cae3ec4f8e79e529ae494094d1cb57f544606082ef6847855195347b5c65c28d702d767e838a012ed56643008349ac7a90c498afbc3797373dc0cdad873c89b45fb93e1169321669a0581926604825e6dd68a1ef269e45a314eecde8daaca2757308e4a77ac54c2a4915515d9bb993457420a85e9cd05cf6ab6afff1a9b7cdc4912908269f73fdc8adad64ee597b198f4262e1"}, {0xc0, 0x11f, 0x1, "ce19fb726e8938906ac3d6adea454bb775205a4e8c1de9ba93b2d7d3ca43209101ca151470ec59a6570306170e5b8f27009709f472809dd832c665dd560aa3a56e89adc903e42e776a33b707b8ddcf1301232344d2097259dc1898049bdf834bbc4a5fc13527bb8084570383b5768fbe3d86f414fdafc328d4e1f2b0db27453f49aea5ef9ebf4c21004c0a650cc6b7a7c3a7b59c7cc5fb983a817ad4cf468d9b0331ed4d4eb40778b1d5c19388f7b0"}], 0x1590}}, {{0x0, 0x0, &(0x7f0000003dc0)=[{&(0x7f0000003980)="dab87f8581b3be53993e06efc7b16a082ed0d598b79a5f5ab459eb1ac8eab55fec4c187656acd6a7faae2e93e75084bacd658c2c5da74383ac2c50b21847a761d1a2ece4c951192a8d50389642da5d5e346a99cff42611df86650373fa7d441032a7ac2958fd175177bca95dbdf1ebfd4831c780921250457e0de058018ab2e36ead8508379a6d148ffc0b0d2988763f95529e8e36fc", 0x96}, {&(0x7f0000003a40)="4fcaaf19fd9cea164ea1a89a49693a66f31704cf9c59db373e9c9d07eca98332b50aa4fb0f68bcafec3db528eef6a63d73a47885707933ffc74eed9351e057c53a641a5e7059d73ba905b6b6febdcdd38353797130470eb4c46262b1f65f1e7074bd04aa1e501a6508d18e29144a5951d97b82df", 0x74}, {&(0x7f0000003ac0)="7c0367c8c516848aaa8e83674f4aa0d34fb3216bcd33f7c51c42ca1991466e3f611b227fba56301f53743ef22b970cbb5105a34cfa0b2f7f0d618b0af129b0d9783a4344fef0b2614f742da1383201fca4d87e889ddc00be82fcd90c58a1f70a5d5df1c17bb699d1e5bd30c9051b8dbc593fdc317f83bb0712429f0960272926e1365a326c26f4e92e1f3f6deef75bcb14d2964838df0ccb28241de4ab8c6b2523a6b9647e4834af851d69375f1e2977c5f1d14f74dbb6eda4c3b7d5b90f805416554341bb3ffd513564733b827ae3fad0d8f9145371a8eafb6ba8edc728733e05b313386d", 0xe5}, {&(0x7f0000003bc0)="9ce685769db50351800ea07afbb5913fa2bb3108646c5478d6e58d2992adcac0e80f170177f47734a9a4d848ba76f1acd0ead8310c3fe9601f70b36e75333fbe7dc40671cf2dc3333bf955a3f98e2677adef7770df79e5c1c3cab6780e8e942730ac54b5005dc08b92f7bfc4f8bc434ba05663f552a23a2fcc79713623fd36b5176d16a1f60d00e35775d4476e515d93801350171a89d65a21e56b", 0x9b}, {&(0x7f0000003c80)="07683462f5b7510789fac9cd1b24848551813966b581484b569036aea28a6e4abf92312b981761ef9c9ecdcfcf12629699ac6b2e7b27294b1c72a88c726461c52035fa841bb85f6bf3ee029b5d7bdb29548c4e41719cc3f8ba784d6f663011ca7f1c3ac51ac2ea6313898da65bad82d7f81c8eb4eb5413f7913a8f1daca867a539c4f5ad5f2c17cc280464149bb618885407338c889d71f12777fbf7926c9a9aceb7e7340436a26616250925266a6d32011241d03e77a2163b78f79d5b069959ad96eb", 0xc3}, {&(0x7f0000003d80)="8f30944bca9558df8d58e7e500ab2f343086433c8ef9bf85db7d46eeda23bdb33ff3", 0x22}], 0x6, &(0x7f0000003e40)=[{0xf8, 0x84, 0x8, "87a8e8644d61fe79f58e9e9e71b108bf067cae27452860c4326646094214c9bf6ce6e102e101350c11191436e7a0f66707eeb44948fb69b53640676f08418f0a37f0b959faf9fcbe904ac9fb677f699bf88143b60775b185bef1e81dcd32779a8e7cdf8992d4255ccdcaa1cf1283ab8daf5f941fc4cf4be3b79f0f1d96a84158aac54e56893630470bdaf6b7867d3af8ec4b733c6e562c616c21831e92dd87ac82193b97213e59a85556f615da8a6ba6c80a1755ecf84ff50be6de4285c9239022cc5f16a51cd81d5e942824ce9ef9c647db2da567bc86981857bc2b9950511d73"}, {0xb8, 0x11f, 0x3, "baece166427afbcd2916d8b254c9f3285395fa965d5a72a9d94017fe5357d5ab98885b541cef1dc4151ea1802fe6f694e809f2163d40f5db3072c01d756d43a18d73f8f4d10ad5588287f75a5c5a90ee781575daeb5a3e9e2520afa5ab2efeb93d516fd006fe9b278fe893b9b3120b1a11285b1dbf97b5ef8501956d52e08468835ba241805150f2514ce9610ff7abebb0fa7eee6e26eacfb0c7d4d9700cb5ebf5570600596e7190"}, {0xf8, 0x84, 0x1f, "9ec5cee6a4538c62a364e1852f8623d9b723317f4ba128cbdd438b03d2cd3967b6251cb05d5fbf8f3d520d3073a032c333cbe06b21405d52e51b5ad2bee0f7d933417ffcf5ef8efdb1498a24b7e70d7fcc0ed673e15e4b5d7eb41f98501fb6e374d3dd15c985104bdde9f730094d5dba2100ca8d74bb1a115575f56e11239026b75bb649ca5b018994a2bf168be0b39e4bf6ca99dcc0301eef52a5f486dd1b6db87aac871b465cabb40d9b4d06785a045a19557501f11d01374e93934b1b3cca655fa49d0cd997a799366239514272ed8d8306a0f7044fc0025333e26669b967b45a"}, {0x108, 0x11f, 0x100, "113fd10cca2965b0e5f116974a2369d90fcc8da43762cc9d05609ba090adebb4d6cb27f120446b1703ab80a782c50192ce4db57a3dd8abc7a1191d1f56353a4706a0183903a164baa9d079ce0ec197f19f7b553f318f9740150c584654c49d8ed2773a7fca852145f641b5d52204ec4e6bcaf22589cc7484496facee5ab1209b93a8a06ea9490dd526257a18b529ee5b12b5e15831a29bd5cdaa283e0e17e2e21aac1efdec31a3bef6110a5d368321b1adb648cb967a4daf72be82b0337679b0321e0f007e00c4a09c73f161b48bfe4e42091b548e233f2bd47791e7547c69b22b7a17d77f2cf7225a35882ace78e1d16ac5"}, {0xd0, 0x0, 0x1, "30ed0abf8aa10f4be0b2b8095bf49b0f6c74bc13c0e57d3bc8e3a20154c21d96e64af8c1a28640b6437cdec6607d5b38459d71b56c3979d1a5acee72a5ed01f9d2b852deb8aec572e8c35cc21f078c454004eb0eda7a8845b98c5a11b0d0d33c7f51fbe34b317555c71e4656f8aa1d143a68f11b351b9f614fb4a769d0f9d807a24f8e7637a736b18c9e42beb026d10b0a0e7f5b22e5f37cd9bcad07e95945f9214b2fb9659bfcb203617bcda7dd69bd0a0cd271185e678710e88bcc76dd"}, {0x40, 0x113, 0x100000000, "cb6d655532558d483ffec17dfbf8f7ae0a11fd5694f12c42ffba69535e914afc3563bcfa2eec9d9e47c4b3b50fba96"}, {0xd0, 0x117, 0xffffffff, "da641eb28b471b28e5454b33676a3fafab98e72b130db50df1846e65d914f83411cf13ffdfccb922c133f32390683cbda3f094bf50b3ee0161d93ca1c1766e8cadb30b16a7da594796810a4b9a91a9fd88b2dda97671d53662dc33152be0e744b1aa69724c27471bf6a65861c870ef69d8216524a6f2983acb00ef3fbc42263be3cc67b753e9777b9e08341ddb2cb2e40e5c54405bdbd07c0746511420735be995e093657d81b868069112eaab0ea4cc8b4943768825ee322e5b98df49ab97"}, {0xd0, 0x11f, 0x1, "ca5fb414dc12448d06ade4d2a662eca54104833037786f4a1b1b9e12704aac9033e5d2030ee4383c0480806271d1b2fbeb3954aee8e057b702161902584a544c3a281391710ef74e9e5ef67e52766bbdb06f39839e046e6a99efd3b06ef569865750fae87670b30e9e2be51f9da73fbbe99a13eff5d8debd7a42aaa6662eacde248123e57855131877848ccad63ca1f5dd3b6be6056a0de4a3d79846d6115d220c944d6bc60e45dd02409f19044eb1a6ad54002b85244dd17f6871a4acf6"}], 0x660}}, {{0x0, 0x0, &(0x7f0000004980)=[{&(0x7f00000044c0)="5d40eb704e565b12d589f124cdd1b81660626816bd0b3160ef9afba0a3223ba5164e54f5e7588cf635dd83fa94aa8f9a6e3343026c974cb415644bf879a150bfafc55a53a26cae6f08f226e04a69a172c503e35098152d3ff58c56687ffeb18b1a91bd696b664b57770c465f9394619faaec4ef6461152f17acf393a0bd4c42124c5f98c616796170c8d483f7b059578e6a4648497de5cb7fc4e6f626bba8137da32f69bac99aa3c04cd86b3838cb4b6e2a45c51ace6ef99d4ac61d651a171e8e97657d225cfe4ac2f1cee87424234af2c937ef85dc3b7f43515", 0xda}, {&(0x7f00000045c0)="c4667ef3bb78fe68113d725bce456ff120942c3780310610f5642f82400c5497411451df7425aeabbc09321b1a8269aceba663b4b78882f258a2f6a47f877ad6aa7b2e883599cbf2f0215d40d6dfad4b0d9487cd5d694b9b3fba546625465c1cf9ce368d076d0e025bd709f63ca02ec4e058a4a92641f85cd68a8a9bbad7343d9fa9fd4e9580ea96e92a4db25076", 0x8e}, {&(0x7f0000004680)="642f0cd2f9c4fa7e51f6651cd9d2a9d70be9c5", 0x13}, {&(0x7f00000046c0)="51dff09b9d12f926e361b391a270c516ad5a38e0083c4b129f3019728a2b316b327bb1031ae8f3b166efebb9af4a7d12b64bac1a86b15dba99568fc29b1ae061d12d49616a87a84d10a65059c9402d59e83fd23df7846828af55d4a5bd24e21c5654410a6ba0d29cbcc7480483622511ee3cc2ab67c5559dc0ec080a", 0x7c}, {&(0x7f0000004740)="cf32f61502d7c2fbf6efaa31092abd319ff056637061c7f9a7ebcfd11fb8c8cfff067f227832457465b54191809995193ca28a37f76e9ef9eb4299785b96123a6b8c3a59bea318ccf4b01c25545adad8ed76740083ffb33480be80bab6e494978f4eb7e960148ddea406f5b50a60b7ab3df6c84a19e8aef1190d84b87a7d61c7e11d877486d3e9166d7c3972791c08", 0x8f}, {&(0x7f0000004800)="9e930600e80a72c734216257fcc367835cc940d3", 0x14}, {&(0x7f0000004840)="7b41a2de756e7bc9805fbaa68f705072af177a054a6cb3e97902a22327cd10f14ffaf63aaeea112772231fc331a4c1b421d5c7741ec2cd8fc07e56dfca40c4e42d44ceba4922a979fab30b3e58db023e563efe223779fdd2ab9878c679ee79d92974a3eaaef93c3bb6228feaaf38994d9760931a7f818f576fd503938d4f4e3cea1f7ffeb337c02cc3bd73578e1e91022a1cc0853c11", 0x96}, {&(0x7f0000004900)="dffd93c6b40eea0bd6c5b0dbc7194b61f06adcfeaf6c6335c56e05c8808984aa80a71b9e821de06c65e36f6d6c1789e8f1ae8ddf9b08b54f81243e3ff9829e2e18258bf0c75c3c26a10b86d7e7ad", 0x4e}], 0x8}}, {{&(0x7f0000004a00)=@in6={0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5a0000000000000}, 0x80, &(0x7f0000004b80)=[{&(0x7f0000004a80)="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", 0xfb}], 0x1, &(0x7f0000004bc0)=[{0x1010, 0x11b, 0x0, "2843d7276dfaf3da4e694feb2f9ea81f3350dafdc5951ce71f681e3e8dc4e99f254e36dc50ccf2576d1cf33bd401c46f587b019a69c0a5e09d91d93737be66a84b5cd6b339328d37accfa5b7252cc862430e3baf52469576be3c80a847421a209e05b6c07bdacc88c9f80d25f4e62917b5cc3088c3b59e330ba87fbc5cd820293c9bf7ed20dd3bdbdaa54260790e5fcc0f4ecb8c4320b9faa0128bc99558bde534ce1a37d70553d1f57b437aff8f5cd7a64d6dd061a27a37473dbca2824e1a52518f4fdda07e5831d314282f3b38d3f8682fdb7c62f8ff64572bdab7663ece68dc840426f9d64838d4be769b4fd869b25eb42a0856933060db44bcbd92674a64de220db9030d2b5b578e3b337d432a76aa103485b44c96fc8f9eeb73296f982abd61680089b55c7924450a29c565ac9702462512b8fce7388ad567633b558cdb0d3f67aa25ab61bcb0f0b1b102c0575ac8896abc1835dcf191e2f4e4a899222174f7b9e81d484cf1104450c7301f874cce05cfafc9bcda6c429252f2e1c8b3907abd2ff04498df68d8217de62641bcf9a32694574c3cf38e3feeecf9ba5f89eca704fa82b2696c4663cd548377020d489a5226ce364fdcfce424347ab9051db7e4104cf1cbd2f900e13c2576ffdefcf5cae8d162d8b873d02f65d3ed6c5ece2710e934a35a5b5abbb2219dfbfa4da0f2eb9b958f8b51f29a06aad357feea4300fe9f2b1e49f58ed6bce9ac8b5654616adeb830fec2e7a5556408ccc0cfb67f9694b31b9e6687a197ba867fee31fdc9ce4fe7c77894b39f0f18fae407cb5e78ffd1a0c1ba93ab74f62fd962062d15af05681f27d6526422839300fe876f62e1809ea0b0d7b70b0f2b5be0cd248351b855724ef47e7e3a306b5a2e83de8c19bfac9a04e21f7cbb13488835cd27f4a5370c0b7b5799b0ea797cfab159b4a48cea085679d9ce89da73a05de5a5122682c1cdfae3b44cc948e02b82e3769cc69222ab4e5112a2a803d7a5f4f24a2960e21cd383159810a6690505a860f8824f1f073991c2d5f13f13934d7572c64cfccb2add75db7677c31455facd3eeb3254b733d4c106d26c94de23e7154925d2e65bc1ea4e6c708dc0c32cd614798b2eda70a7b2f92e96d17c1a19796a8d3708f8a2aee8c66f2f7e9666ebf8c2953ee62d0065a552530dc04eddeb73ce8e9634e03510d6b4fba9184ec30c4f3beb97f56e78798e2775d82be47dbf7a11ce337cca99d98b91d22665244d079fca4654f7941b7b76b6da4e7e34dab454b16558484339b0c2f3bf179a1c63f39d1df099087d8080444b72257d4412a7296dab635b75fce7b392c036f20366cb048352c94eab48a435c4b3ccd2951539f170d3aba6bc4ddef1b11d00db5e826f1a3747e52cf114729690b305dda886d2de2625461ec40c18aa5f2619222e33a2d33c626c80ac86b7d2e2705d28e0305ab8c721c163356100cd27e8d409bb70da080c4ac4ded70412a5fb9a5d3b5fbac40d123aef8b0dd665729aca906e89f0ea48df3d7ba466c7c9bfd1fa128adaf0229d1a60913933cef25041e7e298124177f21ea1e6941e24350e76e01af20ddc99c939e776ed49cfe2584658749b1289d22482de8e023249306d3ead708decc5e4c2264a3585f45deacb5e7e52e331d4eacc4e966c24a6bc388163b47aaa469059237780f6c71e2c85e964724878e267953a296b33d2be567c85544297edfd129226e551764c9f649e1684b9324a0cc5819320f3b138c07bf979f5943d7c9772caf850056ed9d229207d12e84db6c72203cc8f7fdaeaabaf146e2439f4a3fca1d3ffb8e17493036e53b2b596bc2770c15bdd9c3ebe87f5570d4e1e398a7c0c9316cefb577325c0f3d896bb93ab04a565bf6c6d0bbc3eaa140ff73470bccf811c3e60bba589776f91a43f9a4772d69e2feaefdb0593e5f066a3b3561454777736298c3c4373ccefdf0f837ae76ddab63ab2ae42c516515ef182db86dc29f0b52b023db1bae687a5e131f6dc6d2c06f4d8bda758643063865a033d1e6b3fa1c01c47b85be4ca4d59b792ec7d0ccdc96d53df940e0f76643f97baad5e3d9e2df6a2e1a7095de7fd6c97e10e577aa8bb3a05b15d6d39480a681bdb55f1d3376625c01933f8783cf571713eed390d2e59e08b10e8e8e90deb5a536e6cf0386692c86f4c7078f3db50e79263a62e5a2bf80ac8a6575182301fdca7a417668268513daab2cbb148e47ad4d448be6c1e15e9ff7cad4e15e0836539328a684ac070548a7744e692b329814ac3bf6f1d4e92ea0223f07ac2282636fd276387aff8705306f9e8b2119d69c846f134ca9b2b1d10e7513f36d600214bd002850a1ed822cd947a47c5e831502427c4631da6164bb2e09f74e27a2c5e4d4f6fa003f1eff706f71675d807e99d643178ab4425010451e3380f66594179e9728fc509cc97fedaa6071c197c85fdbf3421ef0105d2d8b0b6c8c66485985f19479c0420bbc70795811fc8d7a7a3bf3c6852e639d343b6683a0f8d67ca659de3b1aaf2a1a2b4b775ea39ae8869dfb02b18e03cd2df39b049f95da975dbabc599a66317b7e9c647290a9def8ca8c8cecf837abe28d198cc7416be3ed2bf6281a5f6ce4e3e52a99bad5bc975fd5384b9558e5ab09c51977738768d44d3666c9ed4315e32e4a911f18f8cd623a85c36bb29a451d9191d6c1fe01462d784f1cf255e1f5440520326a72aa3fe203a8d4a26e23fa898409dc9dcc83354e6b5d0a56ffb3837bb978d62e6cccf1f00308703a4cddef3ae3a4b63c59635e20551de9ace8ecbd42c025879787c880cc44baacd0e68c9811340f03972b41459b55ede93d65bb1b6fd76de2ec38ddbb906781e6c1f05fa7993e18de7cefb6d3fc6213cd80645976b8f05a512e5778582c7e94c95b3f79a449670ad6f7d25c8c9cebc97df44efc3d38d9b107d66a6ebdb05b3d3c3a9313088726f319182822fbcfa5cc6f0d336ea5ecfaffb08fff23530f2374bfc58f21634bc874b81037b386cb25de6617013a9fdc6a1d4b8293fa7c2febcc641bc85679405613ed409fc58332d752b8c5697d148683f9b85bd5c8ac72e88cdd549fa336812ac71190fa6a7514d361a11af6015c911e2010e1d673f773a7869fa26babef8a7d8e6204de9f0bf99c258ad3aa2f4417b5e33bbb6cc8f1e9516ef47631580ff9ec82d758960cec7429b4bcc19de6a4f8c31181307072e5c1e9e902eb7fe2014d4a38d29e1a42d509b80a47db96e749a7d84d085eec611e317ce0ada3c37be42afb407a964c9af94e9212bc57e2586604d6308ac49232de5e34b42959f7811b3d5936ee82d1c6fb13f8a4b32dcf0ce35a82d37392603a1f794a1ff852d3b89d198a2f3b2713a01c298bc9ce8e0099c09d65e3b03f6edb5e7f41c3d978d89f3e5d0a6da8401229d5138d9688cdb63e97f4bee2786fd149947bfd53df95cda118f703ad768fad41bc899eeea4e7b40c882a665560dc66b701c4ea0bbd3673ebac5656379794794f5844ba0e508cf5719f1dd50ead7b0d9c01468f6f914d7def3ce5b98ca539ccb2e66a386e514a6826ac051a2eed5a02d5fee01d0e571ae5887038f2afbf5db3a5b1511ee43ff29f036dbac620673f6b0c32d802384494a976223d5c8e8961b23a91735f568d968070ceb45082d7f26edd574e093ef392e47a699a03d9d7b615e7de343c1de18f1502f0f2ab3c2317609d6752a5ef66b38d76a61163615063493426819d17906cbc4a718d63db5d929f6bdc9ace45150e07b4e337a84cdb929bfb784a38cfc8187515d8180e023402becfea3050b9c11be0cec5bee7d80aa092dd193a485c511304639e13f6c42d75a30050effe5eb424191758409f2e65988ffd8237a35022be7103c81663a1ca2b9ef56f34012e2a28d36ec1e521c25f3d4080ced89938350aba9265c0df61e88b027925dee705c2f0fd9eb7c6dc3bbfe7b477eac251ce195d2c32298e59138185c1bb1968e7be969bae8e9ddb39283535de76f5df0d8d1beeb3fd8dd8109849e62aa423e2d243cccefe806aab3727eb7e0f4b4180f2b5f0818999632cbb951a48290ba9b81d3ef9617116503b3b7dca3d5a35972f5cedbb0daac72e7e5e7bb03cc46775a3623abb63e8a0757ccdde71aa2d98ba6ebd7a9d07566db9c96823017dd57a49ad0e6219cfa98043214efc8505d9a9e3e2e503e79028c41948926b6a7adab256535a40bf34cba18d184331eb4115cf39dcb9ccecb4cde9a4be345f6dd463ee6cc3fb7cc90b5dbf50c2741be1dc557408fcda99ebd0577b6380d7aa322086d50cbc3c78ddf2abd399696e55f195dccf02c4bd9bed770d75b92e2c4d0826aeb63cd4de0f048d48c8988fc5e0b7fad519ffd367383b8c1d3dac62e9d6a332c1dfbd854eaeca89cde0d34764c5d206a9110e5c41339e24f59a9584da2471ee43fe2b6e8f59d0d619f9c265cc6ae2cdedda5cc8ac4d319864dec1166b92bd35399d1da957a1826473dcf48afcd7dd727755dac4f9ffd13bd4a754c5ffa5d0d07784d6b39da10d7171c007cd933fd91755a3be85baefe12ec2aa82ee6d7203e5a3410c89c24bb76516cee58cb9e2ceb3bf0133e37afaad6b7f4d2ee0e390c48abce269f811cedae469b1114d0b0fe209dfec38a583c3954e1135d76ec4b81ea0ac3fa459a6aba5dc9f1d2a5b58e24ac50d901f45189d8be26649f7803d9bcba4962daf012361c0068e55c6584c91d5981430fde02500cd858100ef0c21801c46e0345e00f191611eeadf22de253913e3c390b846bd73a9851c23b1b2a94d40d47fdeeff56214348bc3ad6171b09a1c36663ec07d3c98b70d1843881b895df0b4790743447732e8d026f2ba0a3e90c88bac3f7c2b266380366201b5151336ce08169b48bd18c6becfcc3f528bfddb23d01bc905d9798e32970ae4fcb362ad880212ff5bcbb4b441623522e5be6c37af6e2b4a6069778d49523c354d33f87a2f832b24a4a61e265e860be4b9fccf554ae21367411762aec62152237a79700c8db774198937079d833ece6457265b49cdf85a9012896d9e3bdea0b865bcb6c35d257753f36985c7c25783e3523ab228dce173cffa68de00169de033140aa7ba76497680f4f95cfe0c2b34e1c36318136c61baf921289aed61b88a4e6ffa8857699ac8c04ce4bf8b665568a59d1008aad32da372a39d814f8b32018ccb9dceb8b0cafca3039e8c3125ffc5a0d34e0c3158c5de78daaa8ca2bf061dc35593e0d1c39a5b59b4bac9f0fd4e27454919daf54d771924f789f0b6fba46a61c42cb06fc977de473795335a645c80cd5ac92e457b75ec7fb80818f65cb63106394141196ce90b38e3c80af9f1cd3f30c03a1bd5ec96e905e9ae95ff62233d60baa9a2a035c266fa2aeec8702047f159e11db95923d35b229f3416f8cc55e95152c4986f3f61495729e4d514f342ad86352faf75870c26bb376e5423334194b2d445db86a389d3ddb80c27a8f4804ef1802f0a99b44625af2688bcf23c1d510c50881b36b418916f52d7c440ba00d5b499b8ecc32c673ad81565724b7ddc9f5035daabd44f694b5283c70f41561997d7e5182f9440d4fbea83289f49b6a6f0b4acf4de1888490a2c89dc4bedc1a9e530a18acd04c5973b03a0723e73861971d8f7f2672bc9cd45f92a59ae2532bf51dbe374b6cca62fa69ec4643dea577ca018e8d4271f09f47d2fb43f4b01d683a8eb0067d21995092877641a2b9b3053cee445e370e9de033221c3027554cf2e629ffca874c680419b7cd3946cfb072b3cee1d43cb3"}, {0xc0, 0x11f, 0x1, "ba9c091622e772f87eaca2d99cf08b230db515584a2b94f364eafa3ab1668c6f124e52abafdda46a3c97af02b9841386fbed62e2630310a71b822bbc1d93f1ea8b3e8b065f02f6ab94b71508c39f893bb2e319b2d4492f1bff19af7f388c5c33945bb51d725ef365cbbd28cc295edc755f0d3e0269b64fb98b417c5183a7a33323b4524b9bda65bf8453b29e226af8e6787f8600d94c8fecf1ee9009d4a497d4ff996aba92967444c1d6"}], 0x10d0}}, {{&(0x7f0000005cc0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes-aesni)\x00'}, 0x80, &(0x7f00000061c0)=[{&(0x7f0000005d40)="3ea2d2d7366e5157fe4d87d57da40e20a17e4570e7ef149a5b3f062dd322e1b28e95799080e20d8ce50e72829bbb3b96109299026ccad184e4e5e98c30206fec15797f887b73b9946a737b69acf175a451e9bf7a20", 0x55}, {&(0x7f0000005dc0)="920d8938f61cb9b63ebb6504824e6037655e1b82a89f744e6d5f6afe0f85243d0e8dfb11c03adaadb45cb9084e734494f6bac6b0ef2fd26e2861a5bc47ccb1af13a7865c298cdd56942cce0fe6b10c613462f5ef29c85ce608637a48437667e97029990f141e2facba63e27dcdaed1686dc13667c7980d252b8b5f7e94c22fbdc431ba295030", 0x86}, {&(0x7f0000005e80)="e7c00920e17fd0e9dda567ced7aab7b71684f04e994e4ecb394cfc3b0a5fcff430f2c212599468e4c837d55e2cc9a5bfadad1ca7834fd9db8eef4f", 0x3b}, {&(0x7f0000005ec0)="ea3a3fd24f8894c061f3cef04035f609191425b2090fa654ca28ba6e0427359e8fc205b0573ab8379be6de4ed5d373ff1564df7a0e16bde4aa33b24577aca0a2920d8c7770819e26a6d72595ff7a99d56cbb7ba9aa62ba5cfd17998138b2cff5c041", 0x62}, {&(0x7f0000005f40)="c997d18c412744c84b060a8b20672b9bdd8a275a4964e535952eb6571e3fee95b837902f85be61236640aec5c98dab7ab2bf4dfdec576fab048213887afbc865427d28cd75df3ce761bfce0c51249f7a2dd067567bf3bc24caaafc1035d2a6e2a951dfc2aeafbdf8b5", 0x69}, {&(0x7f0000005fc0)="4de77b771e29a51e5a2590898181abf4e6d2159d9fcdd1daaafecda7b1597cbec259fbb0ebdf82f34459274513609580f47939ee98f807f77d0fb1a4a1bedc3c4ffac4260126b72a59da466fc635d056a80117a199197af961fcb9086fe1c8340407c786f25d8fb0141309f1aaddc83db736b6b07c6814e2f7ba88c31bbac0431052fc5f60963882e5dd5368225b4c6401350c298c6f46420c", 0x99}, {&(0x7f0000006080)="f3ed660553da56f5349a1bb6712bb374e9bbf31f049ff0a60e971e91", 0x1c}, {&(0x7f00000060c0)="92270ad30741deba0e9bc5bd233c0ef7583f1ff6ed802f912dc912f7b35c08d9184b79d180e8e5f9d7ea67ba365b71f1fc223c6d82680b2deded72655e1041a3ab549c192472db8feeaf5b01f269350be78593ad25c51bf661292b8ada814f14ba51de67b458611b581406b74204440de2c6e0063621a5d6c95fbd47f0b47bc1efdd2185c10c54f7cdb0c8b5cc29373901d5381518231004e50780f6a008ff41144771ec876c2df1653be7684533adf8f512cfb1bc64f6c9d9df86c674794ce8681d738288eb64535d34cc42f0", 0xcd}], 0x8, &(0x7f0000006240)=[{0x98, 0x11f, 0x81, "5e2c75608ab43e1cd0e1396efc7a8f4351927c280b033291ad6b360194c00086e7e8d058ff7fae0763f3415244143c7a32c99ce094b84f3badc26b9548d10e71f2158bb2692ad9f4e7250f0f4cdd418ce7403a12d4714fc26ebcf3fc5d9f3a3c032dc78dea93a60b7814ccaec3f67739da0af43764607147253f8a86b0cb587227335977b27096a9"}, {0xc0, 0x189, 0x5, "20c65dd53cd42c22402b6fa294ec575bc0200399c614c3e371a08b99d932bb93b237a11e8f8a647be630ee5965d163009f87220ead9f51c59888c396f265d25981cb91330cc213440055a94f8f8d741660a7b5b962790acea191fbc8b3f376012453ec563bc3c000228babb9e1baf5f54809a2abab4b51059746e4bd2e821d62a156d8354bdb9b6bb683fe251ac6802fd28a25ef3c1c4b149eb1aa64b026878eb62f2a6f78d5380dccd75835f20cad"}, {0x88, 0x109, 0x6, "9b3931cc3e7a8de7755466642e681b9968f934794e468ded2a66835d8a726527111323f7f74dcb2ddb3ab4a296a69a7390889e44ad1235151e6f0c0de362c795a72498911e21daa6449e5fbb182a85800b0945920de54fc7a9f8b0c59072309e133d4eab0f17556388ad0e75ff252405871d"}], 0x1e0}}], 0x8, 0x40000) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) connect$inet6(r4, &(0x7f000000cfe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r4, 0x29, 0x3, &(0x7f0000000000)=0x7fff, 0x327) sendmsg(r4, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r4, &(0x7f0000000180), 0xde, 0x10010, 0x0) 17:07:07 executing program 1: memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x0, 0x0) memfd_create(0x0, 0x0) r1 = gettid() syz_open_dev$binder(0x0, 0x0, 0x5) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000100000013) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) gettid() 17:07:07 executing program 5: prctl$PR_GET_SPECULATION_CTRL(0x34, 0x0, 0x84008) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x82000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r1, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x14, r2, 0x200, 0x70bd27, 0x25dfdbfb, {}, [""]}, 0xfffffffffffffeeb}, 0x1, 0x0, 0x0, 0x800}, 0x0) fcntl$addseals(r0, 0x409, 0x6) prctl$PR_SET_NAME(0xf, &(0x7f0000000000)='wlan0$vboxnet0wlan1bdev)self\x00') sendmmsg$sock(r0, &(0x7f0000007a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000027c0)=[@timestamping={{0x14, 0x1, 0x25, 0xb002}}], 0x18}}], 0x2, 0x0) [ 1406.363958] audit: type=1400 audit(1563901627.003:100): avc: denied { associate } for pid=11930 comm="syz-executor.3" name="binder0" dev="devtmpfs" ino=1088 scontext=system_u:object_r:setrans_initrc_exec_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1 [ 1406.402033] binder: 11930:11931 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:07:07 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) tkill(r1, 0x41) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) [ 1406.415369] binder: 11930:11946 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:07:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="f15404400000000b"], 0xfffffe14, 0x0, 0x0}) close(r0) r2 = mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f00000000c0)=[@free_buffer={0x40086303, r2}, @clear_death={0x400c630f, 0x3}], 0x90, 0x0, &(0x7f0000000180)="65bfd0905f54f2331d8d1f7c4911c098cac0bb4f73d9296a5fba4366d8d09e03063900d526c8118901f88b24e64504687fbd81364aa42791f2caf10bf509422db17efe9182be1f8c1f18b2eda91bb1c0817a64b7674613c6ff47f4acbcb2434f3e047fb4c65e4130260d6942eb8bda4eb1daf4dae093792b6cccd9f9c23b145b37880915f67dc8137fec98c3f74d89d3"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="023e6400"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) fcntl$setstatus(r2, 0x4, 0x400) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:07 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = openat$keychord(0xffffffffffffff9c, &(0x7f0000000000)='/dev/keychord\x00', 0x6b01, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5, 0x1, 0x3, 0x8, 0x0, 0xcd88}, 0x20) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:07:07 executing program 5: unshare(0x20000000) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x40000, 0x0) r1 = getpid() ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000040)=r1) clone(0x1bffc, 0x0, 0x0, 0x0, 0x0) 17:07:07 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() clone(0x20080000, &(0x7f0000000200)="86cd1fb9c0176c676db98dd0cfd850407b729c02e90994262342ade81b7cc1f7fe1cea6205086bc62587a633bff2f9f5e9da7d3e0815a022287711b9119bf38f3f09df56defad2af1b6d17710883c184b076ad216f3af1c3cd86c4369f261b2a494e0a08b2029a11933e7083d228277dc6b432fa7d8d1c3cbec3f311ecd90b427fbc7c0f7016e43a9d82b1d50e9e0dfa255b4aed8b1eaf65cc25c07e3729f8cf83125d3a3640ce6a9fb9716969abc281bd90cfe3d79976c1b81b1a172d6d75e0c6e05f01a598fec76f2339081a1a27d0668d77a6241b45ab4f0cdea0a6d8d3fcac334fde037a0552167d1cf6b786073fae", &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000180)="142b0213caeb") wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1ebed56adb3b91", @ANYRESHEX, @ANYPTR64, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="e6c55c669eb82eec510100019b3d7280437a7462010000000000000029a741efca44f937d0492482ba837296d961244e2e0c734057548c402cc43b3897cc275fd87f333c960d2bc40dd887fc8dc4872bf5b65c87e940b30eecd4f9ad4c079521dfdaf3d0fef515586de3c101e4f8d1b12b1894ef983d0cfcdfbb1118c5ae060bb6ae2af877735be7b03b5278b53fe125393d6b6adf7f7d0734bc1e5566b4d1447a982f0b0b061ef05d38f5ddd795e0b31aa0a9709836e23ecee4c4a77c6da57914a504", @ANYRESHEX], 0x0, 0x13f}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 17:07:07 executing program 1: memfd_create(0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) getrandom(&(0x7f0000000080)=""/44, 0xffffffffffffffea, 0x0) r0 = dup(0xffffffffffffffff) clone(0x0, 0x0, 0x0, 0x0, 0x0) openat$keychord(0xffffffffffffff9c, &(0x7f0000000380)='/dev/keychord\x00', 0x0, 0x0) memfd_create(0x0, 0x0) r1 = gettid() syz_open_dev$binder(0x0, 0x0, 0x5) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000000100)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000100000013) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040), &(0x7f00000000c0)=0x4) gettid() 17:07:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000040)=@caif, 0x80) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0xb3, 0x0}, 0x3}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000600)='sched\x00') preadv(r1, &(0x7f00000017c0), 0x1fe, 0x0) 17:07:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c6100000000000000001f0000003d9d204649584d6dbda90788bc904c956cd6"], 0x0, 0x0, 0x0}) [ 1406.852273] binder: undelivered death notification, 0000000000000000 [ 1406.869656] binder: undelivered death notification, 0000000000000000 17:07:07 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x1, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000001180)='/dev/vga_arbiter\x00', 0x0, 0x0) geteuid() fstat(0xffffffffffffffff, &(0x7f00000012c0)) r1 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000000)={0x4, {{0xa, 0x4e24, 0x6, @remote, 0x5}}}, 0x88) clone(0x11040000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = accept$inet6(r1, 0x0, &(0x7f0000001240)) r3 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r3, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x800000013) read$FUSE(r1, &(0x7f00000000c0), 0x1000) gettid() r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f0000001200)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x20416000}, 0xc, &(0x7f00000011c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="dd00000f304b47340cab48030f215c57c80af5ad80c6087f38abfad93754322f289f85c5027ede7215819e50e764643e86d4e921994a56d582b463c24b7590dbd80974f025230f4c6428a041115afe798901405f5adca014aed8bb4f50840e8c8ede6e16bed5bef501490ff5f63185908116df29f537ffc990cb2bc86ac27fbba8a9e7d2b3f95be938558de43f5000a8e88554ebc7b85c49df16e9778d64dc9f0a9ce38771", @ANYRES16=r4, @ANYBLOB="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"], 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x8c0) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000001140)) gettid() r5 = inotify_add_watch(r1, &(0x7f0000001280)='./file0\x00', 0x80000000) inotify_rm_watch(r1, r5) [ 1406.934094] binder: 12007:12009 unknown command 1628201743 [ 1406.943346] binder: 12012:12013 unknown command 1074025713 [ 1406.943355] binder: 12012:12013 ioctl c0306201 20012000 returned -22 [ 1406.952457] binder: 12012:12013 BC_FREE_BUFFER u0000000000000000 no match [ 1406.952469] binder: 12012:12013 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1406.998867] binder: 12012:12017 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1406.998992] binder: 12012:12017 unknown command 6569474 17:07:07 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x240) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0xfffffffffffffffe) r1 = syz_open_dev$binder(0x0, 0x0, 0x10000000804) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) fchdir(r0) [ 1406.999000] binder: 12012:12017 ioctl c0306201 2000dfd0 returned -22 [ 1406.999108] binder: 12012:12017 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1407.043799] binder: 12007:12009 ioctl c0306201 20000040 returned -22 [ 1407.102231] binder: 12023:12024 unknown command 0 [ 1407.107752] binder: 12023:12024 ioctl c0306201 20008fd0 returned -22 [ 1407.744214] binder: 12012:12017 unknown command 1074025713 [ 1407.750157] binder: 12012:12017 ioctl c0306201 20012000 returned -22 [ 1407.760223] binder: 12012:12013 BC_FREE_BUFFER u0000000000000000 no match [ 1407.768187] binder: 12012:12017 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1407.768482] binder: 12012:12017 unknown command 6569474 [ 1407.768489] binder: 12012:12017 ioctl c0306201 2000dfd0 returned -22 17:07:08 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) ioctl$UI_SET_SWBIT(r2, 0x4004556d, 0x0) 17:07:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, '-}'}, {0x20, 'posix_acl_access'}, {0x20, '/dev/binder#\x00'}, {0x20, '/dev/binder#\x00'}, {0x20, ']vboxnet1:eth0'}, {}], 0xa, "0a3e3a689c020a6a6ba2775178d9bf7d62a7f581f91b5790dbdc2310bc2699f982bbaeb9920d5851742f12b229ce55ded2a0a5ce7ac59039d8"}, 0xa1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=ANY=[@ANYBLOB='\a\x00\x00\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f630c40000000b7ad0378cc7362ebed2a53d90000000000000020006b7f76d2071246aa82a6290500297a0f373ac1cc48a952eafb92bc4c73323141248243e728298fcd97bba842b3891a51b1ccc4507cd11941ed3df029ae30baec06be6e5faaf752e26117ad4b178f557a614ab1b528"], 0x0, 0x0, 0x0}) 17:07:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = getpgid(0x0) ptrace$setsig(0x4203, r2, 0x6, &(0x7f0000000000)={0x1d, 0x1, 0x1000}) 17:07:08 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = socket$unix(0x1, 0x800000000005, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r1, 0x0) r2 = socket$unix(0x1, 0xffffffffffffffff, 0x0) connect(r2, &(0x7f0000931ff4)=@un=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmsg$unix(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1800e41f000000dfff00000000", @ANYRES64=r1], 0x18}, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000000c0)={0x8, 0x4, 0xa, 0x0, 0x0, [{r1, 0x0, 0x5f}, {r2, 0x0, 0x7}, {r2, 0x0, 0x8}, {r0}, {r1, 0x0, 0x4}, {r2, 0x0, 0x8}, {r2, 0x0, 0x5}, {r2, 0x0, 0x5}, {r1, 0x0, 0x7ff}, {r0, 0x0, 0x6}]}) close(r1) close(r0) socket$nl_xfrm(0x10, 0x3, 0x6) 17:07:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='stat\t\xc0\xd2\xfe\xbc\xf9\xdf-\xea\xc8\xc1w\xff\x17\x12H\xe9\x11\x93Q0I\xe81U\ro}\xe6l\xf6\xf6\xbd\xbf\x13\x11\x92\f\x8a&\xed\xa4\xdc\xc3x?\x9d\xb5\x11k4\xd3\x1b\x05\x12\xa5\f\xd6\xfd\x00'/75, 0x275a, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0x100) fallocate(r0, 0x0, 0x0, 0x110005) 17:07:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f00000000c0)={0x0, r0, 0xfffffffffffff001, 0x401, 0x6, 0x7}) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) sendmmsg(r3, &(0x7f000000ac80), 0x66, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) 17:07:08 executing program 5: r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1ff, 0x6003) close(r0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000000c0)={{{@in=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@remote}}, &(0x7f00000001c0)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000240)=0xc) lchown(&(0x7f0000000040)='./file0\x00', r2, r3) 17:07:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = open(&(0x7f0000000000)='./file0\x00', 0x200, 0x10) r2 = dup(0xffffffffffffffff) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x9) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x1000000000) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) ioctl$EXT4_IOC_GROUP_ADD(r1, 0x40286608, &(0x7f0000000080)={0x101, 0x9, 0x2, 0x0, 0xb8, 0xfff}) accept$packet(r1, &(0x7f00000000c0), &(0x7f0000000100)=0x14) creat(&(0x7f0000000040)='./file0\x00', 0x90) [ 1407.791583] binder: 12012:12013 BC_CLEAR_DEATH_NOTIFICATION invalid ref 3 [ 1407.838463] binder: 12038:12039 unknown command 7 [ 1407.849136] binder: 12038:12039 ioctl c0306201 20008fd0 returned -22 [ 1407.862987] binder: 12038:12039 BC_CLEAR_DEATH_NOTIFICATION invalid ref -1224736768 [ 1407.883606] binder: 12038:12039 unknown command 0 17:07:08 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x40800, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r2 = open(&(0x7f0000000000)='./file0\x00', 0x204200, 0x40) ioctl$PPPIOCSNPMODE(r2, 0x4008744b, &(0x7f0000000040)={0x8029}) close(r1) [ 1407.889796] binder: 12038:12039 ioctl c0306201 20008fd0 returned -22 [ 1407.892995] binder: 12038:12061 BC_CLEAR_DEATH_NOTIFICATION invalid ref -1224736768 [ 1407.978538] binder: 12063:12067 ioctl 4004556d 0 returned -22 [ 1407.985438] binder: 12063:12072 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1407.992793] binder: 12063:12072 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:07:10 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(r0, 0x0, 0x2, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:07:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:10 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) seccomp(0x1, 0x0, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[{0x5c}, {0x6, 0xffffffffffffffff, 0x0, 0xffffff7f7ffffffd}]}) r1 = dup3(r0, r0, 0x80000) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000180)={0x8, &(0x7f0000000140)=[{0xfffffffffffffffc, 0x4, 0x2, 0xfffffffffffff923}, {0x3ff, 0x0, 0x1ff, 0x800}, {0x2, 0x0, 0x1ff, 0xedfb}, {0x7, 0xfffffffffffffff9, 0x3, 0x100000001}, {0x6aa, 0x8820, 0x6f0, 0xb7}, {0x7fff, 0x7ff, 0x2, 0x7fff}, {0x400, 0x8000, 0x6, 0x1000}, {0x3, 0x7, 0x9, 0x8}]}) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@empty, @multicast2, 0x0}, &(0x7f00000000c0)=0xc) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000280)=@get={0x1, &(0x7f00000001c0)=""/172, 0x6}) setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000100)={@local, @dev={0xac, 0x14, 0x14, 0x2b}, r2}, 0xc) mknodat(r1, &(0x7f00000002c0)='./file0\x00', 0x8f4528ddfbc63f30, 0x9) fcntl$setflags(r0, 0x2, 0x1) 17:07:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net\x00\xbb(\xb7\xa1M\xe5\xac\xdb\xb4H\x81\x14B\x95\x1e$\xef_\x1c\x04kb\x8f\x9d,\xae@\xb1\x05\x00\x00\x00\x00\x00\x00\x00\x9d\xc7\xf92\xe7\xf7\xc7\x91\xe2V\xf7\x93\x03\f\xceo\x0f\xd2\x19\x83\a\xce#F\xac\x93\xeb\xaf\xd3\xe8\xcc\xc2-\x12\a\x8ca\xd461:o\\\x16\xda\x14x\xa8\x13\x90<@\x04\nG\x1c\xbb\xa4\xe1\xa3\xd8\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'0xffffffffffffffff, 0xffffffffffffffff}) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x400000, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0) r4 = dup2(r3, r2) write$FUSE_NOTIFY_STORE(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="2900000004000000000000000000000000000000000000000100000000000000010000000000000000484cb3c86742fe86c0910253f8ace98c7e29df87eb42f2ca052d4a7a775a5f496a336438dc879585250a35b8a5948a6643fa0ffc7780cce77c41df747fd674336e22eaaee912bad83bdbdea075b83f239307de7a55bba7760a6d"], 0x29) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r4, 0xc0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0, 0x0, &(0x7f0000000240)={0x5, 0x4}, 0x0, 0x0, &(0x7f0000000280)={0x1, 0x7, 0x818, 0x5b71}, &(0x7f00000002c0)=0x4, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x40}}, 0x10) readahead(r4, 0x4eb, 0x8) 17:07:10 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[@release={0x40046306, 0x3}, @acquire, @register_looper, @register_looper], 0x3df, 0x0, &(0x7f0000000200)="95d70a936fc3f587f0c6e566eca8aae359e7b793e26a03b9fb34088a25e5f884d067a6e9a1152947fd319234297331b4ce5989871b10685272d63c2f595cae215ac28b91814778f97a331c23b570bee9e0ce99d7ca1dcc890532e799"}) r2 = dup(r1) getsockopt$inet6_tcp_int(r2, 0x6, 0x435f591fbaa1ae9a, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:10 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x2, 0x28001) ioctl(r0, 0x800, &(0x7f0000000100)="fab86349d5e7e173bf01a4e7c8923244d85b4aa1889ba007106c656f4ca6251f5fa5b9214f4b89f07a50ffe38bd167050acd2ad2be6bb695d7ae022c1ade5b3624323da67be4adaa4e97aa648e33fb7622e6be40bfc061716cb0a1949a937a7a7af908aa0ddc5d241d1a86094f2712aa74e2b1de72682308508c4557d56725ade128ef889a415378d7b4a95978db14682f4c8ed57ee75171dd6aff7b46b8fcceb663a6f8ec3bfae78844c4212bf21b54804465e53dd3232a7e25b70818851c2e251699fdccc4d4982831c3030e3b1e") ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000200)=""/244) write$evdev(r0, &(0x7f00000000c0)=[{{0x0, 0x7530}, 0x14, 0x9, 0xffffffffffffffff}], 0x18) 17:07:10 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = eventfd(0xffff) fcntl$setflags(r2, 0x2, 0x1) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x100001) tkill(r0, 0x16) 17:07:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r3, 0x1, 0x70bd28, 0x25dfdbfb, {{}, 0x0, 0x410c, 0x0, {0xc, 0x14, 'syz1\x00'}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x24000040}, 0x8001) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0}) [ 1409.954003] binder: undelivered death notification, 0000000000000000 [ 1409.989130] binder: 12104:12105 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:07:10 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000080)=0xfffffffffffffff8, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x2200, 0x0) ioctl$UI_DEV_CREATE(r3, 0x5501) close(r0) 17:07:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = dup(r0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0xc100, 0x0) ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000100)={0x7, 0x21, 0x1, r2}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:10 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net\x00\xbb(\xb7\xa1M\xe5\xac\xdb\xb4H\x81\x14B\x95\x1e$\xef_\x1c\x04kb\x8f\x9d,\xae@\xb1\x05\x00\x00\x00\x00\x00\x00\x00\x9d\xc7\xf92\xe7\xf7\xc7\x91\xe2V\xf7\x93\x03\f\xceo\x0f\xd2\x19\x83\a\xce#F\xac\x93\xeb\xaf\xd3\xe8\xcc\xc2-\x12\a\x8ca\xd461:o\\\x16\xda\x14x\xa8\x13\x90<@\x04\nG\x1c\xbb\xa4\xe1\xa3\xd8\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x27) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000180)={0x0, 0x0, 0x8, 0x0, [], [{0x5, 0xfffffffffffff7b8, 0x2, 0x1, 0x7fff, 0xd3}, {0x100000000, 0xfffffffffffffffb, 0x1, 0x9, 0x8000000, 0x1fdc3669}], [[], [], [], [], [], [], [], []]}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/checkreqprot\x00', 0x400000, 0x0) ioctl$RNDADDENTROPY(r2, 0x40085203, &(0x7f0000000440)={0x40, 0xa8, "7128ccf813cdc253fcdf0aa31edaf594861782009560d927b593224ec125989d9909c1b2761c08c28a5223d430d6765b7bc48279a6fb23c891070e78719efd211440822d7876003fef8415a5d94945d815103b6d9ff9a51b44ea416ad19677bc7c0e1a2f2652edca0a3b0939c3636586230b36f5de473ec052130b0014c14cf8879f0cafeca254366d93d95769109401f240487b08457880bb21c2e2658a3f5fbca350d2a1362db2"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) sendto$unix(r2, &(0x7f0000001040)="3bf28b553e4428aed8c56a0e86af772fe692c0c264cd77eb1bc1dabb1d1d63340ec5f31fdaa6c5a7d3777a978f28fc6c91b70bdf44061f55d71a95a24c29ebb8e8ab47eff03b587ab246bbc3bc8ea2d52ea44cf177d7fccd4bc77b95ae18f5a64388ae5aba4d694e152dd7f69dc4ce1724b553890044d876cee699947a718c4a42747841e6f19c4219bed33408a924a1da02e66dd0404aa2818a851f5537676d08847b77b8eb997c9a6f8ca0da355a6f4f824937844e5d3915853033aea4b01d691e09eced70a1d3233bde3b203cf0b915183a434a50ff3c0f2c9568904b6549a09bbe19d35c1a14c394a35110dfbec64c98bd6a5863204fe3cce5dce8c03755c9c917435343b2fbdb710c84e1408ded5a6af5d92fb90cf2ebb0aae4b01a0056354073704b77ff3a4b6834a9719429033673cc5820e9d72b6b30e7e63fad8e25c7be7c029ed00121a91735b860c2cdb187597aa95abcd78d11997f8fe334c7311d2495b77d75c86bce3e84bf3bee83bc2af8e4de4d5a0e9a1e2a15d6b3d82c0b13ccbf98dc0d73a02274a00633c02706500de170b2377a543146bfb9942a4dae9d1aadf91920baf8dc2afbadeb4d4b352f5c805a815b0a73712ff5a323dacbbb487638dc59d31083d2b21e39f5611acc252ca85b10c1a1784a7eb7a3be9ae2ecdcdda94151c2c29e3a3040d5eabec4db4adf8a422f7835635a9baab38c7e7eb86b68dda7acc334b7c6a048f4f617e7894293d4534d8c071560629517bad71fd42b1bbc08e430cecd3ee4374af06007a3ab6cad064aa2e00fcf4d5a75f2ed9c6f7bb72eed1b024f616acaed8b36114fc5527ab1bbce97cc45a4f11fee8eeb3909a412aeb9ed826aaf537ba7063f5b63adc4dee6f984f561e32da9faa1dc9f2291821d18bf841302e11298c1a4feb044bec21fab049efc624bbab817ec2f1f790fb298fcd1ab0ab22c9bec0a7c4737ff7c52ea0c25d116ee05bf58c0aac5e1f48fbeddb63ba7ebaa1fa149259368f1f1f0709c0038213249de696c4799aa82ab5d419e6e8e4cac04bb361db3bf4ce23bbdefc34b79829c644329bf4f960c522bcc5fc557422ec8f5cfd2e73b84e9e7edcd3ab59f62f60afc4a3cf6d4f798a73550a84c80c1c3ef602a513f9db554ab9034ed655e0759e46dddfad44cc89555aaa73e6985816265b6a3a4729e6a54b1b3e807392287513b52332d50a7d54b6e67188f6abd04fe8092a7b6b176002e1bd9947399ecde72fa755660fd5f582040b299ee374f3171832fac4b62526b3606a359044e7638a85b3e6d12f97f01528dd50c7c3e2149d4a01e0c63f07077affdd000682d42568d8298c3c51a7ceeb00f681da0e7a18a9a9982bc444417fb98499e1f87a2bc0495b686c849b61fd86b95fd05bc3034dc4695d26b5309727a59d188fc6b220e20c6c7013501f6d647e99a90d8d89dbc659a3c94416e256d3be458875b28e01fd99e383c66fec88a5f5eb4a236447292f935068ecffc5b30c958b2745a7c51a790836467aaa908e25b5036986c1296a7b0c91b83a80e3baa37865930f587c9abb5f997c9113f4e262be9d2691f50e5e1ce4a86f219d376449eed32f8aaac63bd0b910596f30a4bc931d74df004af2fa2d10f41c7b43a984850b928e45d059c3d99d45293fffaa6d74558d2751f10333c913bf7bda938ff85b613a25228862dfaefe0a0e5c2fe82defe63e906741317e630d9f832eb3f6d20bc4913bc2dfc87e1267ffc7caf663ee6f39bbbda203da0624117989799600b5b1e89af53c0246834d3d9a8e08c236af6a299d2e13b9567f4b92b79f39c220b731e7fe917e3c2e4c28e7b884254992ecf321dd9e74639de1bc7c54858ddb0235bf35150a413d345abb42b7ee4f73b44f5db4b0310b5f8eae0f43d871f9dc75cc72f3d8cf488305d10294c2e5fac685dd1b68ab22690badf0cda7def679bf87bd30f13d6a0a3d5ef47d7d947d02f0fa76ddc452382a0f62c2580faf130e732a7011ddd6882dd6a0e36fcb67c1ec1898760dda563cf23c68b1d9ffe8bf6377299112cf60cbb7d5832ba8ecd8e2aebf9dfd5d1257abbe2924432f87073489b7374830c193c7e790e00f6582a4f4e92e99fc541fcfbadab644bb953aaafa9c811b9a91cf93e14df6fb3d90b9c5506a992e00caeab5ebbcffe46b10973f7b4437c93e2a69f6ad34a68d7be813cc33db9b79efa232de807b7ca646e5d27fe458698b029687cbbf86fe8f5e3b17d4c11a294cffcc6894e5561440721f149fdea3801adbe4eacd4007bd7060aa6bb3ebd21949ea3b1cace64cc25ecc2aa66e070cdd2d599b60f110e4e70d9b8ab13ba56666483da32c3b50de51568e87cdd6716cd8b3f71c58fb97dfff29dbda8e5619bd9f01503515476d5947311be001839252dfc33bee737d65857ec72401737c79c368698c4fafe5f2c0b6239010414bfa7fe613d7dc3031d246745504fc3fe066652e73da65a5a09412ea9b1d10699f104882b31ef7e69e158b247a1e58da53dafa36ee9fe02ef6e5d2513ab4415025afe3ea818961f50fe8641fdf83692aa58bab3c65b924590a5dfe7624e07987a6eaf7c27d85a4337ea15033eac8aee59a4adabc47ea4c52457dc350f4b36fa4914e572adefee8575dd0e7ac979dafb992a8a0ea2f84f58218e0f95e3cbc03620afdbdf2d07bd229be1b127b1e77a3e33a83409fca208b68ff658472d8ca07df46b98068abf762b8268c9e02ac01d13fac25f5111801bbcc9a06e76e9d292fa2f05ff6335b84441dd48fe05f1833a0b2f77e68d8aceea489a5e671337f94cbe069f6394b159a7d8d19f0202fba910da4be5efb6a6cf1ac3e686be1a946bd149b52eee98fae95a83c3dce7ab3cdfae8783b8b38d108c0f95e239041e3d6441e3189c75213c8015f40faaebb657cd3a11a32d45f81e7ee9bb990be0198530f1a605f3f42e274968ab820e1eeee759a731e7c801991cec19573fe495794ef7ff349d026cbf656e9a9d0339364be8e956d3504fbe7852b99d99e431ad0dc17b824ef24e6e07a2849eefc2f4d8786ca14dfcfa5d69927d272bea0aa2987c8c1f44a23c782fcdb9260a84728765403d103d1eca050d2cd68685007ad8ca0de84cb16711e5fa60ffd0cec791c91b467df4794d39ec279302d9690e0f421423f2b42ea0ec9f45b8622484f95aa8add8edefa45f785c05c8178c8c6b8ddf84176ae425ee4262b37af61794aa7c6485b0b85113b6ab5008deadfd3baef998705bbcfbe0c6c1a8e5b0c0cf73476c3b91f1907d7b78abb4d2fbb9017a14533bb64eef58d24ed14a2ca7369c41edd9be722669d5f4f0ad6c45db6bcea4c2b5c33dc7a0b95f4122ec512cca0b6b83399797dc1a3384a5724da5dba96371890c615e49f62dff592e4f8e6790e9d9ee986b73aa06f80e2da6ac01346234ca2f94a2dc3bc6733ac86ba9d9906ad86b62d420a5d729170e9e46ea24f44b5eeb2fdb4ebc758c740b8632af77ba1cc40cfbdd88539486c3474a919bf39d594f28f056a05eff123e2a99fc14cc549bbffc04f0c16ac60b6df3614920a8415b6adb13efb2f0db648e6d98cb10628f878eb80ed356bfaed788f820b0a1b3c5fa11d45e4bebdb6f834a4b43bcaab43d96f23e19f6f79d62def7060f3ea835707faa180ea5d34ec8eadd3b81170f49845561d94cb4563eb2f700331e34c101d276515f277497d906923a1fa91f9b0540c5c551679f9c6f79a74e41e2fad67961b8daa14ebc3db6d5415c179d42e86ee25bbe588034f817b517303ea2867447ade57aa573f97984f9dbf79e13209adb297dcae04d3db390c3946ea421906c42f67c8430aa476a99f3cf284caca0b2aa8962e6fbee681299a45fe2475bd6f127c974ba5ef12d8a95150f09113a99ffa29621f73eebe42f18caa0603a24f665a7497cc6a907a6883ef7e64f0f2fda78ee626865ef4d9b54f32deba1ac379dd83d39160d8e32e79e64a8fa88ef0906ab02b295c9d9652767315863fc978530e43eb61600014e5c0b1b8f170d98f2ae8461989503a373b752ab3bb88f3db4de1dd86011e1cc672b386da9961def7580e83bf8ea0bfcdc8bfa489158a5f1cafa2779b33d00734bff10f72c758715038ae08639312c220d894e2f4752bcd4c35114e327e4d5d3acbcea46070eea7f10edb31b7d4926677e316ca0eececfe84c80657646f7218d95117a7a307df3afc70de2990d01e8076942df46b42753cebef9468d53edd3700850c65c90d15e3b76aa6558b7b34da8f65ca0359c0d1d36b8e79a3405caec27d28dc06adf3ddb28a6cdd0f61122e7297e274c60670ef4ee551afe6c3ac05395ca9c57ca7fa1f728dfe6159359fd23096cbb3b32ea6c41d381a5fa485b02beb93006866643978d95949afc38d9761305f110c7d126fc0a6ee11357c6bc0270179325a72d10c9252808c540ad5feec9f0a0beebe745318f3ea01733ad360abe6a47c76669cbdba3e9ae75ae6510a57c1a6a429d72d6237b9753acc05105e4493bc7e0d81619248e3eecd39a993988bd218702fa9c3e084108b4d1ef8692cfa94edc160a733229ed7807e785a53b0b49892c3280f4227fbfd5aa9d874452e8a336c4a7f8b488103ef110a66728e8124554a401687c73c11001c2eaf2123e3158c1a26fe1991094ac315653c2c4b1d0aa3964861e84fe4de2fcb91210c67295529171e8c03f2f905aa08e08c487cf20bc42fddd35fc2962e952ffd00ede08145b1436f7515042f47d7c6d8048906a5340aa9e5f1f5007a4d2b18cfa4146b4a0201aac794fbeb7760c39495a01ba2e22f1beb2e819d419b2755dc6e10279c36d7dfcd83e2293e1cd2099444b1ae643ffe42491aef9bfcdc873291992b3657b10a6cb76755e2c89e4bb6e46d70d58e60988bcf21a8c13cea962421c0aabfbaa1b55244dc06fa3325bf7b7889c0de8709ecb85d9d65e9ccbd81ab8732f6138e33c7f94883c2aac6aaa94c2608a24c1757e0ab0bf12d6400744e50243258a8f0cbee6f1118e476f8a5d4121ee7505705b6599d6f20f10cf68e07cf8b2bcc908bbd35e404adf004f02f2fdaa0a9bac1ec85b9dbcd3502f7467835e199ad5961874a390c492c439c6cd879d5ffd6429c59156bc5270d62ced5d602a366308b54e5a577a13385fcaff8ee2cc787f5df052689bc99e41f8dab6ccac64615447c73c7b81b7bc5b0ab2997611db5544db745c77e676eab813700dff23a1a13e3e9476e902b8142b17143d565a5e08c316cb8ddc8f1697db3d47842993539d829d9dca5b57211be299489dddf4d16a075db70aea740bf5e238a7b4d4c29a97cebc4943f32f08124d40402a786fc1c92d229472dd6056e9d725af00d0e541e76e20db2aa5bebad2919829ef659583d1d5ddbec418cae06df40b2a8677cb66f5f3defb983f04b375edfd8242f9555984e037620514045c8a72cbd423cec1c8a74892e0fe066b916163cc04b784a5746ebf01fd7e2bbaf735c5fa40ad87de885f49ef7767f7ea175fc252703d810992818925cc671e0591df9956e3c94d71df858a8f2363e8bb2d3a8702380947264cf26a19cf965c37c3b5999006dbfb6063db2552ba7c70d2fbace10963b3017d9f0f2287ceffc929ac56744b681be1290ceb03045c7f2dfca9c2112bfbfefa35cd9cf88458cbed4d16d404fc6e624f5352984b0ad77a776771e33305cb8982f55bdee3e8a38d42d75499c046000df3eb98da5be1871083842bcc5e355239e48c5487bf7c78c1342e7aaced1eacf799c7d8a0db80d969df6def2d2e63af5de2", 0x1000, 0x80, &(0x7f0000000500)=@abs={0x1, 0x0, 0x4e21}, 0x6e) [ 1410.072131] binder: 12124:12127 ioctl c0184900 20000100 returned -22 [ 1410.084202] binder: undelivered death notification, 0000000000000000 [ 1410.101611] binder: 12124:12127 ioctl c0184900 20000100 returned -22 [ 1410.128919] binder: 12140:12142 ioctl c0c0583b 20000180 returned -22 [ 1410.140802] binder: undelivered death notification, 0000000000000000 [ 1410.149533] binder: 12140:12147 ioctl c0c0583b 20000180 returned -22 [ 1410.157254] binder: undelivered death notification, 0000000000000000 17:07:11 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) r2 = dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000000c0)=[@mss={0x2, 0xfffffffffffffbff}, @window={0x3, 0x100, 0x5}, @window={0x3, 0x8}, @window={0x3, 0x101}, @timestamp, @timestamp, @window={0x3, 0x2, 0x40}, @mss={0x2, 0x65c123fe}, @window={0x3, 0x8, 0x4}, @window={0x3, 0x1, 0xff}], 0xa) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:11 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.net\x00\xbb(\xb7\xa1M\xe5\xac\xdb\xb4H\x81\x14B\x95\x1e$\xef_\x1c\x04kb\x8f\x9d,\xae@\xb1\x05\x00\x00\x00\x00\x00\x00\x00\x9d\xc7\xf92\xe7\xf7\xc7\x91\xe2V\xf7\x93\x03\f\xceo\x0f\xd2\x19\x83\a\xce#F\xac\x93\xeb\xaf\xd3\xe8\xcc\xc2-\x12\a\x8ca\xd461:o\\\x16\xda\x14x\xa8\x13\x90<@\x04\nG\x1c\xbb\xa4\xe1\xa3\xd8\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\'0x0) ptrace$cont(0x20, r0, 0x1, 0x5) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x82400) write$cgroup_int(r3, &(0x7f0000000140)=0x9, 0xf) wait4(r1, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ioctl(r3, 0x5, &(0x7f00000000c0)="964e2baccff5456f2e53a719525fe441b82326128717cef7a2d56d7474976dc22d4cf53c7eafd2500ba35abe1b9015c9238793e22edcdcab18d3cd8a15bd4d2fe74e6be8d6aa33") tkill(r1, 0x34) 17:07:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x1000000000000802) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0xfffffd14, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) r1 = dup3(r0, r0, 0x80000) ioctl$UI_SET_MSCBIT(r1, 0x40045568, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) fallocate(r2, 0x0, 0xfffffffffffffffa, 0x1) ioctl$ASHMEM_SET_NAME(r1, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') fcntl$setstatus(r0, 0x4, 0x4000) openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) close(r0) write$P9_RMKDIR(r1, &(0x7f0000000040)={0x14, 0x49, 0x1, {0x40, 0x2, 0x4}}, 0x14) 17:07:13 executing program 1: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = signalfd(0xffffffffffffffff, &(0x7f00007aeff8), 0x8) mkdir(&(0x7f0000508ff6)='./control\x00', 0x0) read(r1, &(0x7f0000e6d000)=""/384, 0x180) signalfd(r1, &(0x7f0000000100)={0xffffffffffff7ffe}, 0x8) r2 = inotify_init1(0x0) fcntl$setstatus(r2, 0x4, 0x72109c5fef5d34d3) r3 = gettid() fcntl$setown(r2, 0x8, r3) rt_sigprocmask(0x0, &(0x7f00009fd000)={0xbffffffffffffffe}, 0x0, 0x8) fcntl$setsig(r2, 0xa, 0x20) inotify_add_watch(r2, &(0x7f0000000000)='./control\x00', 0xa4000960) open(&(0x7f00003f5000)='./control\x00', 0x0, 0x0) 17:07:13 executing program 5: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x4002, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:13 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)={0xa, 0x4, 0x0, 0x5f5140cf, 0x20, 0xffffffffffffffff, 0x4, [], 0x0, 0xffffffffffffffff, 0x4, 0x5}, 0x3c) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$FICLONERANGE(r0, 0x4020940d, &(0x7f0000000100)={r1, 0x0, 0x6, 0x3, 0x6}) r2 = syz_open_dev$binder(&(0x7f0000000540)='/dev/binder#\x00', 0x0, 0x800) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r2) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000240)={0x1, 0x80000001, 0x20, 0x9b5, 0x4, 0x3, 0x7fff, 0x400, 0x7, 0x1}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0e630c4000000000cfd66780efefc8c1c4844c078a1543e9c35a4caa7a323347321b43b67a8a43aa2dc72bfa5be28556fc04d5c3fc2d49ca4b98d7cb62284403b3418cb12a306571051058adb6368eb10ca1df533e7444b97e1d4a11ae20fc007604aac54808b16b261e07905a3635f3b2e5f7baeb0890119f220b9349d2c3d851d5d001207feb2db9266ccb28922dbda1879e10ea"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="00657c97d1ffffff062cd604d16478acf048a7eeb2edc5c700000000f57c000000d8"], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) accept$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000300)=0x14) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000200)) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x7, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x800}, @alu={0x4, 0x0, 0xa, 0x2, 0x9, 0x0, 0x10}, @alu={0x7, 0xbb68, 0x6, 0x3, 0xb, 0xffffffffffffffe0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1}, @jmp={0x5, 0x4, 0x4b102393858e82dc, 0xf, 0x2253d21a0f9c0f6, 0x1}], &(0x7f00000001c0)='syzkaller\x00', 0x1, 0x1000, &(0x7f0000001040)=""/4096, 0x41100, 0x0, [], r4, 0x1, r1, 0x8, &(0x7f0000000340)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000380)={0x4, 0xb, 0x6, 0xb6e}, 0x10}, 0x70) dup(r3) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:13 executing program 5: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000000)={0x1}) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x214, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'veth0\x00'}}}, ["", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x40044) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000180)=0x5, 0x4) utime(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x2, 0x6}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40045}, 0x8840) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000680)) ioctl$RTC_AIE_OFF(r0, 0x7002) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200)='IPVS\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x802001}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r1, 0x610, 0x70bd25, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f00000002c0)={&(0x7f00000001c0), 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="e3e7fff530decef3b61f7d59ab56fa10ea3d5e5201e9766b0dfd0d799ecb78f2a92a55f46d2af2e26428002bc1e72a7992c90ad35b83b1ec62fa44695d57165b446a1c7a87078b3fc03ae7c74016d640217ac0d652f22a43e9d0001f6eea80dbb90d4f365217207fd99f967c0086dd58ed52755a6d97115c0e4a7f5c4307734b89963c1d8d1eb0758b3b5f661903ab13d8e3379c6c13d8c40ef775f4ee477a0693f6bb0d78", @ANYRES16=r3, @ANYBLOB="02042cbd7000fddbdf250700000008000500050000001c00020008000d00000000000800030003000000080002004e2300000800040080000000"], 0x40}}, 0x10) 17:07:13 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101000, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000080)=""/163) [ 1412.985983] binder: 12162:12166 ioctl c0306201 20008fd0 returned -14 [ 1412.995155] binder: undelivered death notification, 0000000000000000 [ 1413.015500] binder: 12162:12176 ioctl c0306201 20008fd0 returned -14 17:07:13 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_generic(r1, &(0x7f0000001280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8408000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000880)=ANY=[@ANYBLOB, @ANYRES32], 0x2}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) r2 = socket(0x10, 0x802, 0x0) write(r2, &(0x7f0000000000)="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", 0xfc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x1141042, 0x0) setsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000180)=0x4, 0x4) ftruncate(r3, 0x2007fff) ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@dev, @broadcast, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0xffffff89, 0x0, @local, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) socket$inet(0x2, 0x4000000000000001, 0x2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = getuid() fstat(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x2, {0x100, {0x10, 0x3, 0x5}, 0x8, r6, r7, 0x3, 0x2, 0xfffffffffffffffc, 0x5, 0xe4, 0x5, 0x5, 0x5, 0x10000, 0x8e, 0x6, 0x6, 0x9, 0x248000000000000, 0x8001}}, 0xa0) timerfd_create(0x0, 0x0) write(r5, &(0x7f0000000340), 0x1000003c5) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) select(0x0, 0x0, &(0x7f00000005c0)={0xa0, 0x8, 0x200, 0x9, 0x7fffffff, 0x5, 0xffe, 0xfc}, &(0x7f0000000600)={0x7, 0x0, 0x7fffffff, 0x7f, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) clock_gettime(0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000140)={0x8}, &(0x7f0000000200), 0x0) syz_open_dev$binder(&(0x7f0000000840)='/dev/binder#\x00', 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x1ff) perf_event_open(&(0x7f0000000380)={0x2, 0x70, 0x8, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xd, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0xfffffffffffffffb, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b3, 0x4, 0x9, 0x0, 0x2f670e85, 0x33e, 0x7, 0x7, 0x0, 0x0, 0x5, 0x7f, 0x9, 0x10001, 0x0, 0x0, 0x4, @perf_config_ext={0x0, 0xac0b}, 0x10140, 0x0, 0x2, 0x8, 0x0, 0x3f, 0x7}, 0x0, 0x8, r5, 0x8) accept$inet(r3, &(0x7f0000000680)={0x2, 0x0, @remote}, &(0x7f00000006c0)=0x10) sendmsg$nl_route(r1, &(0x7f0000000800)={&(0x7f00000002c0), 0xc, &(0x7f00000007c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="54deebe319669b202bfd2115feae7cfbaeb6acc58b108c4a452c552f688694ee9f30c31c9ab8b3365626c5fc7459929e8a251fab304eca60e1cb20b6965b6721b208412c0e85b1c8adf8"], 0x1}}, 0x10) sendmsg$TIPC_CMD_DISABLE_BEARER(r4, 0x0, 0x0) sendfile(r0, r3, 0x0, 0x8000fffffffe) [ 1413.027143] binder: 12178:12181 unknown command -1753455360 [ 1413.027152] binder: 12178:12181 ioctl c0306201 2000dfd0 returned -22 [ 1413.028221] binder: 12178:12181 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch c1c8efef8067d6cf != 0000000000000000 17:07:13 executing program 5: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x4000000028, 0x0, 0x0, 0xfffff028}, {0x80000006}]}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x10000, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000180)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f0000000200)={@rand_addr, 0x0}, &(0x7f0000000240)=0x14) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000600)={{{@in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@remote}}, &(0x7f0000000700)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000800)={@mcast2, 0x0}, &(0x7f0000000840)=0x14) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000ac0)={0x0, @multicast1, @loopback}, &(0x7f0000000b00)=0xc) accept$packet(r0, &(0x7f0000000b40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000b80)=0x14) getpeername$packet(r0, &(0x7f0000000bc0)={0x11, 0x0, 0x0}, &(0x7f0000000c00)=0x14) getpeername$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000d40)=0x14) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000d80)={@initdev, 0x0}, &(0x7f0000000dc0)=0x14) accept4$packet(r0, &(0x7f0000000e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000e40)=0x14, 0x80000) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000001240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x21000800}, 0xc, &(0x7f0000001200)={&(0x7f0000000e80)={0x374, r3, 0x920, 0x70bd2b, 0x25dfdbfb, {}, [{{0x8, 0x1, r4}, {0x98, 0x2, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x8}, {0x2c, 0x4, [{0x401, 0x1000, 0x7, 0x7}, {0x7, 0x81, 0xb42, 0x7fffffff}, {0x3, 0x6, 0x0, 0x4b}, {0x6f, 0x800, 0x6, 0x23c}, {0x8001, 0x2, 0x6, 0x3}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r5}, {0x78, 0x2, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x8}, {0x8, 0x4, r6}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r7}}}]}}, {{0x8, 0x1, r8}, {0x48, 0x2, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x14, 0x4, 'activebackup\x00'}}}]}}, {{0x8, 0x1, r9}, {0x19c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x80}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x20}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x8}, {0x4}}, {0x8, 0x6, r11}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x8}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x44, 0x2, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x7}}, {0x8}}}]}}]}, 0x374}, 0x1, 0x0, 0x0, 0x8f5bbc0d3ea830b7}, 0x800) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r13, 0x8912, 0x400200) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r1, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x40000000000002f, 0x0) 17:07:13 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = accept4$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14, 0x80000) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000180)=@req3={0x2, 0x7, 0x800, 0xffffffffffff65ff, 0x9, 0x38e}, 0x1c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0971deb695a412cbad24969a1c775ee5732b"], 0x0, 0x0, 0x0}) poll(&(0x7f0000000100)=[{r1}], 0x1, 0x9) r2 = dup(r1) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000180)={0x2, 0xfff, 0x7, 0x3, 0x7}, 0x14) ioctl$UI_SET_MSCBIT(r2, 0x40045568, 0x9) fdatasync(r0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000000c0)=0x20006) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1413.071026] audit: type=1400 audit(1563901633.713:101): avc: denied { write } for pid=12194 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_fib_lookup_socket permissive=1 [ 1413.072260] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.1'. 17:07:13 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000540)=""/26) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) close(r0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/120, 0x78}, {&(0x7f0000000080)=""/36, 0x24}, {&(0x7f0000000140)=""/133, 0x85}, {&(0x7f0000000200)=""/185, 0xb9}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000340)=""/81, 0x51}], 0x7, &(0x7f0000000440)=""/188, 0xbc}, 0x20) [ 1413.159684] binder: 12212:12214 unknown command -1226936055 [ 1413.165651] binder: 12212:12214 ioctl c0306201 2000dfd0 returned -22 [ 1413.183648] binder: 12212:12214 ioctl 40045568 9 returned -22 [ 1413.190825] binder: 12212:12214 ioctl 40047459 200000c0 returned -22 [ 1413.202993] binder: 12212:12214 unknown command -1226936055 17:07:13 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000100), &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffd5a, 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r3], 0x20f, 0x0, 0x0}) 17:07:13 executing program 5: socketpair$unix(0x1, 0x200000000000005, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x10, 0x3, 0x4) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) ioctl$sock_ifreq(r1, 0x89f0, &(0x7f0000000080)={'ip_vti0\x00', @ifru_data=&(0x7f0000000000)="b06f31673d3da2b793d4f9a507e3c9133ba7ce8f5e6e538ecf8829b08f7f4aae"}) ioctl$sock_ifreq(r1, 0x89f3, &(0x7f0000000080)={'ip_vti0\x00', @ifru_flags}) [ 1413.209423] binder: 12212:12214 ioctl c0306201 2000dfd0 returned -22 [ 1413.247040] binder: undelivered death notification, 0000000000000000 17:07:13 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) llistxattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=""/4096, 0x1000) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x5d) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001f00)='/selinux/enforce\x00', 0x8400, 0x0) execveat(r3, &(0x7f0000003f40)='./file0\x00', &(0x7f00000040c0)=[&(0x7f0000003f80)='\x00', &(0x7f0000003fc0)='\x00', &(0x7f0000004000)='wlan1[bdev\x00', &(0x7f0000004040)=',wlan1(ppp0\x00', &(0x7f0000004080)='ppp1\x00'], &(0x7f0000004340)=[&(0x7f0000004100)=']keyring%\x00', &(0x7f0000004140)='\x00', &(0x7f0000004180)='@*systembdev+md5sum+\x00', &(0x7f00000041c0)='#\x00', &(0x7f0000004200)='#vboxnet1{]ppp0systemself{\x00', &(0x7f0000004240)='&selinuxeth1wlan0posix_acl_accessproc\x00', &(0x7f0000004280)='^system[#(\x00', &(0x7f00000042c0)='\x00', &(0x7f0000004300)='user-cpusetem0selinux{\xdd\x00'], 0x800) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @remote, @bcast, @remote, @bcast, @remote, @bcast, @rose]}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/182, 0xb6}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f00000013c0)=""/192, 0xc0}, {&(0x7f0000001480)=""/116, 0x74}], 0x6, &(0x7f0000001580)=""/213, 0xd5}, 0x4}, {{&(0x7f0000001680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/6, 0x6}, {&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f00000017c0)=""/137, 0x89}, {&(0x7f0000001880)=""/2, 0x2}], 0x4, &(0x7f0000001900)=""/187, 0xbb}, 0x1000}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/136, 0x88}, {&(0x7f0000001a80)=""/197, 0xc5}, {&(0x7f0000001b80)=""/239, 0xef}, {&(0x7f0000001c80)=""/84, 0x54}, {&(0x7f0000001d00)=""/9, 0x9}], 0x5}, 0x7}, {{&(0x7f0000001dc0)=@ax25={{0x3, @rose}, [@rose, @bcast, @remote, @remote, @bcast, @default, @rose, @null]}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e40)=""/103, 0x67}], 0x1, &(0x7f0000001f00)}, 0x1}, {{&(0x7f0000001f40)=@can, 0x80, &(0x7f0000002200)=[{&(0x7f0000001fc0)=""/230, 0xe6}, {&(0x7f00000020c0)=""/180, 0xb4}, {&(0x7f0000002180)=""/81, 0x51}], 0x3, &(0x7f0000002240)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000032c0)=""/136, 0x88}, {&(0x7f0000003380)=""/179, 0xb3}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)=""/91, 0x5b}], 0x4}, 0x8000}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003680)=""/2, 0x2}, {&(0x7f00000036c0)=""/105, 0x69}, {&(0x7f0000003740)=""/189, 0xbd}, {&(0x7f0000003800)=""/91, 0x5b}, {&(0x7f0000003880)=""/207, 0xcf}, {&(0x7f0000003980)=""/180, 0xb4}, {&(0x7f0000003a40)=""/167, 0xa7}, {&(0x7f0000003b00)=""/135, 0x87}], 0x8, &(0x7f0000003c40)=""/210, 0xd2}, 0x8}], 0x7, 0x40000100, &(0x7f0000003f00)) [ 1413.288718] binder: 12229:12230 ioctl c0306201 20000240 returned -14 [ 1413.295993] binder: 12215:12234 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1413.296558] binder: undelivered death notification, 0000000000000000 17:07:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) close(r0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = add_key$user(&(0x7f0000000100)='user\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000180)="c474a15b14db9b6966edb7a84a7ad0bc6faa3ae6d0bb868ca8b263cd59b08a82a1f7f4fbb9e0cc6978cde9ea91566c797074c3e472e17fc3e183c75563c95816c5f94bbcd8649181ce2fde19026cf68f0a0767d47659b9f52a0538461c02790f0546c91d402b1c6b3ffd504b91f614cd6df42007a01410ef1221ff84ebb813c294fb34151914ce4f134abbb7e01b5176d82aa10805ee9a0c3686d5763d51256ff17d79c53be9fc0cc01015776299dbf8817f70", 0xb3, 0xfffffffffffffffc) keyctl$describe(0x6, r2, &(0x7f00000003c0)=""/168, 0xa8) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1413.346206] binder: 12229:12241 ioctl c0306201 20000240 returned -14 17:07:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000000c0)={0x22b, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0}) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r2, 0x40485404, &(0x7f0000000180)={{0x3, 0x2, 0x5, 0x3, 0x8}, 0x0, 0x9}) r3 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) fcntl$F_GET_FILE_RW_HINT(r3, 0x40d, &(0x7f0000000080)) [ 1413.439631] binder: 12242:12244 unknown command 0 [ 1413.445140] binder: 12242:12244 ioctl c0306201 20008fd0 returned -22 17:07:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r2, &(0x7f0000000180)="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", &(0x7f0000000280)=""/214}, 0x18) dup(r2) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1413.538301] binder: 12253:12254 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1413.565659] binder: 12253:12255 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:07:16 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8c002) write$eventfd(r0, &(0x7f0000000040), 0x8) clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x34) splice(r0, &(0x7f0000000080), r0, &(0x7f00000000c0), 0x9, 0xf) 17:07:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f0000000100)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:16 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x9444f3f9cc3e5096, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) close(r0) fsetxattr$security_smack_entry(r0, &(0x7f00000000c0)='security.SMACK64IPIN\x00', &(0x7f0000000100)='\x00', 0x1, 0x3) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uinput\x00', 0x802, 0x0) write$uinput_user_dev(r2, &(0x7f0000000180)={'syz0\x00', {0x8001, 0x7fff, 0x4, 0x7fff}, 0x47, [0x6, 0xfff, 0x3f, 0x5, 0x8, 0xffffffffffff632f, 0x0, 0x5, 0x400, 0x6, 0x10001, 0x5, 0xbb, 0x2, 0x3, 0x5, 0x2, 0x1ff, 0x8001, 0x0, 0x1, 0x80000000, 0x3, 0x2, 0xff, 0x80000001, 0x5, 0x84e, 0x100000000, 0x10001, 0x4, 0x0, 0x9, 0x6, 0x1, 0x9, 0xffffffffffffff00, 0x401, 0x6, 0xfffffffffffffff8, 0x2, 0x8001, 0x8, 0x8, 0xffff, 0x1, 0x7f, 0x7, 0x2, 0x5, 0x9, 0x8, 0x80, 0x8000, 0x1000, 0xff, 0x6, 0x6, 0x3, 0x7, 0x1, 0x2, 0x29e2dc86, 0x101], [0x0, 0x2, 0x3, 0x6, 0x56f, 0xfffffffffffffc00, 0x100000001, 0x7, 0x16ee, 0x7, 0x8, 0x800, 0x3fd12972, 0xe44a, 0x3ed, 0x3, 0x6f4, 0x80000001, 0xfffffffffffffffe, 0x5, 0x200, 0x5, 0x4, 0x0, 0x7, 0x7fff, 0x9, 0x5, 0x8000, 0xfffffffffffffffb, 0x25a70, 0x0, 0x83, 0x7, 0x7, 0xffffffffffff8001, 0x5, 0x0, 0x80000000, 0x6, 0xfffffffffffffff9, 0x8, 0x7, 0x0, 0x100000000, 0x84de, 0x3c03, 0x8001, 0x3, 0x8, 0xf182, 0x6, 0x8, 0xff, 0x8, 0x1b5e280000000000, 0x4, 0x8, 0x80000000, 0x5, 0x4, 0x4, 0x7, 0x2], [0x2, 0x1f, 0x1, 0x7, 0x800, 0x8000, 0x8001, 0x2400000000000000, 0x9ff, 0xff, 0x8001, 0x8, 0x8, 0x3, 0x80000000, 0x7, 0x40e, 0x10, 0x5, 0x2, 0x20, 0x8, 0x9, 0x4c0, 0x4, 0x0, 0x401, 0x4, 0xffffffffffffffff, 0x7fff, 0x1, 0x1f, 0x8, 0xe8f, 0x3, 0x885, 0x6, 0x4, 0x80000001, 0x90, 0x100, 0x278, 0x0, 0x2, 0x2, 0x0, 0x1, 0x5, 0x6, 0x0, 0x90000000000, 0x0, 0xa55, 0x9, 0x800, 0xa9, 0x5, 0x40, 0x10001, 0x7, 0x26, 0x8, 0x4, 0x1], [0x9, 0x7ff, 0x20, 0x5, 0x7ff, 0x3ff, 0x9, 0x4, 0xfff, 0x9, 0xffffffffffffff3c, 0x4, 0x2, 0x7, 0x70, 0x7, 0x7, 0x0, 0x0, 0xeb07, 0x8, 0x6, 0x8, 0x7, 0xffffffffffffff00, 0x8, 0xf16, 0x1, 0x3, 0x7, 0x9, 0x9, 0x4, 0x6, 0x3, 0x8000000100000, 0x9, 0x8, 0x0, 0x1, 0x0, 0x1, 0x5, 0xfffffffffffffc01, 0x6, 0x6, 0x9aa, 0x489, 0x100000001, 0x8d, 0x9, 0x4b8, 0x41, 0x401, 0xff, 0x3, 0x7b, 0x3, 0xffffffffffffffff, 0x225c, 0xf8c, 0x6, 0x0, 0x7fff]}, 0x45c) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:16 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000100), &(0x7f0000000180)) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000240)={0xfffffffffffffd5a, 0x0, &(0x7f0000000200)=ANY=[@ANYRES64=r3], 0x20f, 0x0, 0x0}) 17:07:16 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400202) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) 17:07:16 executing program 5: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) llistxattr(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)=""/4096, 0x1000) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0x5d) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @ipv4={[], [], @loopback}}, 0x1c) r2 = socket$key(0xf, 0x3, 0x2) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000001f00)='/selinux/enforce\x00', 0x8400, 0x0) execveat(r3, &(0x7f0000003f40)='./file0\x00', &(0x7f00000040c0)=[&(0x7f0000003f80)='\x00', &(0x7f0000003fc0)='\x00', &(0x7f0000004000)='wlan1[bdev\x00', &(0x7f0000004040)=',wlan1(ppp0\x00', &(0x7f0000004080)='ppp1\x00'], &(0x7f0000004340)=[&(0x7f0000004100)=']keyring%\x00', &(0x7f0000004140)='\x00', &(0x7f0000004180)='@*systembdev+md5sum+\x00', &(0x7f00000041c0)='#\x00', &(0x7f0000004200)='#vboxnet1{]ppp0systemself{\x00', &(0x7f0000004240)='&selinuxeth1wlan0posix_acl_accessproc\x00', &(0x7f0000004280)='^system[#(\x00', &(0x7f00000042c0)='\x00', &(0x7f0000004300)='user-cpusetem0selinux{\xdd\x00'], 0x800) sendmsg$key(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="020d0000100000000000000000000000030006000000000002000000e00000010000000000000000080012000200020000010000000000003000000003030000ff3f567b0000000000000000000000000000000000000001ac1414bb000000000000000000000000030005000000000002000000e00000010000000000000000"], 0x80}}, 0x0) sendmmsg(r1, &(0x7f00000092c0), 0x4ff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvmmsg(r4, &(0x7f0000003d40)=[{{&(0x7f0000000140)=@ax25={{0x3, @default}, [@rose, @remote, @bcast, @remote, @bcast, @remote, @bcast, @rose]}, 0x80, &(0x7f0000001500)=[{&(0x7f0000000240)=""/189, 0xbd}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/182, 0xb6}, {&(0x7f00000000c0)=""/56, 0x38}, {&(0x7f00000013c0)=""/192, 0xc0}, {&(0x7f0000001480)=""/116, 0x74}], 0x6, &(0x7f0000001580)=""/213, 0xd5}, 0x4}, {{&(0x7f0000001680)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, &(0x7f00000018c0)=[{&(0x7f0000001700)=""/6, 0x6}, {&(0x7f0000001740)=""/122, 0x7a}, {&(0x7f00000017c0)=""/137, 0x89}, {&(0x7f0000001880)=""/2, 0x2}], 0x4, &(0x7f0000001900)=""/187, 0xbb}, 0x1000}, {{0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f00000019c0)=""/136, 0x88}, {&(0x7f0000001a80)=""/197, 0xc5}, {&(0x7f0000001b80)=""/239, 0xef}, {&(0x7f0000001c80)=""/84, 0x54}, {&(0x7f0000001d00)=""/9, 0x9}], 0x5}, 0x7}, {{&(0x7f0000001dc0)=@ax25={{0x3, @rose}, [@rose, @bcast, @remote, @remote, @bcast, @default, @rose, @null]}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e40)=""/103, 0x67}], 0x1, &(0x7f0000001f00)}, 0x1}, {{&(0x7f0000001f40)=@can, 0x80, &(0x7f0000002200)=[{&(0x7f0000001fc0)=""/230, 0xe6}, {&(0x7f00000020c0)=""/180, 0xb4}, {&(0x7f0000002180)=""/81, 0x51}], 0x3, &(0x7f0000002240)=""/4096, 0x1000}, 0x5}, {{&(0x7f0000003240)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f00000035c0)=[{&(0x7f00000032c0)=""/136, 0x88}, {&(0x7f0000003380)=""/179, 0xb3}, {&(0x7f0000003440)=""/248, 0xf8}, {&(0x7f0000003540)=""/91, 0x5b}], 0x4}, 0x8000}, {{&(0x7f0000003600)=@nfc, 0x80, &(0x7f0000003bc0)=[{&(0x7f0000003680)=""/2, 0x2}, {&(0x7f00000036c0)=""/105, 0x69}, {&(0x7f0000003740)=""/189, 0xbd}, {&(0x7f0000003800)=""/91, 0x5b}, {&(0x7f0000003880)=""/207, 0xcf}, {&(0x7f0000003980)=""/180, 0xb4}, {&(0x7f0000003a40)=""/167, 0xa7}, {&(0x7f0000003b00)=""/135, 0x87}], 0x8, &(0x7f0000003c40)=""/210, 0xd2}, 0x8}], 0x7, 0x40000100, &(0x7f0000003f00)) 17:07:16 executing program 1: connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x100, @loopback}, 0x1c) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000100)={{0x2, 0x0, @dev}, {0x0, @random="2d17e4d74441"}, 0x0, {0x2, 0x0, @local}, 'ip6gretap0\x00'}) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x132224) clone(0x2102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = gettid() setsockopt$inet6_buf(r0, 0x29, 0x22, &(0x7f00000000c0), 0x235) ptrace$setopts(0x4206, r2, 0x0, 0xfffffffffffffffa) tkill(r2, 0x39) fcntl$setstatus(r1, 0x4, 0x42803) 17:07:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0xa5, 0x0, &(0x7f0000000240)="3f368f3fe939bd56f9ce7996a40969a62381d4dff73808b09ac2732e3ac1eb94414ce75463e3f97d75400e2ff3112863f2ed5420b501d4216c5b8dcc47a26ae5cfaeb4babefde9da11532b0838af54b4ac88fdb9c0b7188d72f244534f6fe6281fdc1836ea47930027422498692f8687d365551929ea4ae7fe11328048c4fd8ea889e9555d4be97ab564d8d518656062b866965cd2e4e2ee6d9248b162e4d8f24962fabe6a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e400c4000000000c7c4398b7941af3e399ffb1399731582e11f44f067398754b4a6ed8de768ddf51cb5fad7cdce9b4a5bb877763d3c216a8efc949bb0e44958bd8d5783f586998f0bed257d4e6260c64363ef0744fda68cabe41d8370c11d882e8e96aaf1d83dff3d44a93e5b2e77a62f8554dc804fb49419c7747cd4cc09c9be3677413420447626d7d34600c78b07"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1416.025251] binder: 12265:12273 ioctl c0306201 20000240 returned -14 [ 1416.040034] binder: undelivered death notification, 0000000000000000 17:07:16 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x211, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x4090) tkill(r0, 0x11) [ 1416.101069] binder: 12287:12289 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1416.118632] binder: 12287:12289 unknown command 1074544654 [ 1416.132741] binder: 12287:12289 ioctl c0306201 20008fd0 returned -22 [ 1416.149358] binder: 12287:12289 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:07:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x7) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$BLKGETSIZE64(r2, 0x80081272, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1416.181410] binder: 12287:12289 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1416.189052] binder: 12287:12301 unknown command 1074544654 [ 1416.204399] binder: 12287:12301 ioctl c0306201 20008fd0 returned -22 17:07:16 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x10, 0x0, &(0x7f00000000c0)=[@request_death], 0xa5, 0x0, &(0x7f0000000240)="3f368f3fe939bd56f9ce7996a40969a62381d4dff73808b09ac2732e3ac1eb94414ce75463e3f97d75400e2ff3112863f2ed5420b501d4216c5b8dcc47a26ae5cfaeb4babefde9da11532b0838af54b4ac88fdb9c0b7188d72f244534f6fe6281fdc1836ea47930027422498692f8687d365551929ea4ae7fe11328048c4fd8ea889e9555d4be97ab564d8d518656062b866965cd2e4e2ee6d9248b162e4d8f24962fabe6a"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e400c4000000000c7c4398b7941af3e399ffb1399731582e11f44f067398754b4a6ed8de768ddf51cb5fad7cdce9b4a5bb877763d3c216a8efc949bb0e44958bd8d5783f586998f0bed257d4e6260c64363ef0744fda68cabe41d8370c11d882e8e96aaf1d83dff3d44a93e5b2e77a62f8554dc804fb49419c7747cd4cc09c9be3677413420447626d7d34600c78b07"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1416.265130] binder: 12308:12309 ioctl 80081272 20000100 returned -22 [ 1416.267804] binder: 12268:12283 unknown command 0 [ 1416.267813] binder: 12268:12283 ioctl c0306201 20012000 returned -22 [ 1416.298880] binder: undelivered death notification, 0000000000000000 17:07:16 executing program 1: write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], 0xf4a) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@empty}}, &(0x7f0000000100)=0xe8) r6 = getgid() fstat(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(r1, &(0x7f0000000380)={0x7d, 0x7d, 0x1, {{0x0, 0x5c, 0x1, 0x1f, {0x9, 0x1, 0x4}, 0x40000000, 0x2, 0x5, 0x4, 0xc, 'trusted.syz\x00', 0x12, 'posix_acl_access\'(', 0x3, 'lo\x00', 0x8, 'security'}, 0xc, 'trusted.syz\x00', r5, r6, r7}}, 0x7d) bind$packet(r3, &(0x7f0000000040)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @local}, 0x14) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000140)=0xfb8, 0x4) splice(r0, 0x0, r2, 0x0, 0x10001, 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00') 17:07:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = fcntl$dupfd(r1, 0x406, r1) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000240)={@in6={{0xa, 0x4e20, 0x7e86, @mcast1, 0xffff}}, 0x0, 0x81, 0x0, "74ed8e8d1d5fac4dbc160b12447ed7ae4f8abc596d26262a03ff9e2427d91b093ccd60db571d1c7f4a40c6c670b504241d75198b48c57b8c197eee62559253ec0581c97e46fb8ebc925c53eef30083e6"}, 0xd8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) getsockopt$inet6_tcp_buf(r2, 0x6, 0x1a, &(0x7f0000000340)=""/40, &(0x7f00000003c0)=0x28) set_robust_list(&(0x7f0000000200)={&(0x7f0000000100)={&(0x7f00000000c0)}, 0x5, &(0x7f00000001c0)={&(0x7f0000000180)}}, 0x18) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1416.305890] binder: 12268:12283 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:07:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x600400, 0x0) getpeername$unix(r2, &(0x7f0000000180), &(0x7f0000000100)=0x6e) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e630c400000000056da96b756a1b0983809aeb9bff31fb73a098da905b089c3cfdfcd2d0cb44ed4ba1237a893d1b63a79a79cd8da763c1381d1c2e4953767ec0600551bd8fb"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0}) getsockopt$inet6_buf(r2, 0x29, 0x2f, &(0x7f0000000480)=""/156, &(0x7f0000000080)=0x9c) ioctl$UI_SET_FFBIT(r2, 0x4004556b, 0x34) r3 = dup(r1) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1416.311177] binder: 12308:12315 unknown command 0 [ 1416.311185] binder: 12308:12315 ioctl c0306201 20008fd0 returned -22 [ 1416.313286] binder: 12308:12317 ioctl 80081272 20000100 returned -22 [ 1416.315155] binder: 12316:12318 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1416.315287] binder: 12316:12318 unknown command 1074544654 [ 1416.315295] binder: 12316:12318 ioctl c0306201 20008fd0 returned -22 [ 1416.315796] binder: 12316:12318 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1416.357827] binder: 12325:12326 ioctl 5608 0 returned -22 [ 1416.357916] binder: 12325:12326 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 98b0a156b796da56 != 0000000000000000 [ 1416.370612] binder: 12325:12326 ioctl 5608 0 returned -22 [ 1416.370641] binder: 12325:12328 BC_CLEAR_DEATH_NOTIFICATION death notification cookie mismatch 98b0a156b796da56 != 0000000000000000 [ 1416.438029] binder: undelivered death notification, 0000000000000000 17:07:17 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f0000000040)='\x00\x00\x00\x80\x00\x00\x80\x00') close(r0) 17:07:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) dup(r1) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') fsetxattr$security_smack_entry(r0, &(0x7f0000000440)='security.SMACK64MMAP\x00', &(0x7f0000000480)='/dev/binder#\x00', 0xd, 0x1) sendmsg$TIPC_NL_NET_GET(r4, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4001000}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)={0x1ac, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x60, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x3, @remote, 0x289}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xc}}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x22}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4000000000000000}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xba70501}]}, @TIPC_NLA_BEARER={0x64, 0x1, [@TIPC_NLA_BEARER_PROP={0x1c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x401}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'bcsh0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e20, @empty}}}}]}, @TIPC_NLA_NET={0x44, 0x7, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x800}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x200}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}]}, @TIPC_NLA_LINK={0x24, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xbd}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x20}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffffffffff9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}]}]}, 0x1ac}}, 0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r3) sync_file_range(r2, 0x7, 0x3f, 0x4) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) fchmod(r2, 0x8) ftruncate(r2, 0x66d) 17:07:17 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x111000, 0x0) write$P9_RWRITE(r2, &(0x7f0000000100)={0xb, 0x77, 0x1, 0xfc}, 0xb) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:17 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) truncate(&(0x7f0000000040)='./file0\x00', 0x100) mkdir(&(0x7f0000000080)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000000)='./file0/file0\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="02000000010000000000000004000000e0fd000020000000000000e32000000000000000"], 0x24, 0x0) 17:07:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1, 0x2, 0x1, 0x2, 0x0, 0x0}, 0x2c) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'syzkaller1\x00'}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000340)={@multicast1, @broadcast, 0x0}, &(0x7f0000000380)=0xc) bpf$MAP_CREATE(0x2, &(0x7f0000000100)={0x0, 0x4, 0x77effb, 0x0, 0x820002, r0, 0x1, [], r2, r1}, 0xfffffffffffffe60) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000040)='8', &(0x7f00000001c0)}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000180)={r0, &(0x7f0000000040), &(0x7f0000000140)=""/45}, 0x18) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f00000001c0)='./file0\x00', 0x7) ioctl$UI_SET_KEYBIT(r3, 0x40045565, 0x22b) [ 1416.864013] binder: 12268:12283 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 1416.871963] binder: 12268:12332 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 17:07:17 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x4, 0x4) r3 = accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) getgroups(0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) getpeername$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000800)="0adc1f123c123f319bc070") setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x29}}}, 0x0, 0x8000, 0x0, "926a2864973c08cf181ff338860ee4a6fcb655883c4ddeb25e6f24783724e9e546c64c3023de083e086bb8b8c3e1cd87d7e0f4764e3a90cf5c22b4fc8308de176ae9d4a2e671f4f05d92ac40afb9a5fa"}, 0xd8) r5 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)=ANY=[@ANYBLOB="140000001e0005025a00"/20], 0x14}}, 0x0) chown(0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685, &(0x7f0000000000)) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r6, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=""/127, 0x7f, 0xffffffffffffffff}}, 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000740)={&(0x7f00000004c0)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/58, 0x3a}], 0x3, &(0x7f0000000700)=""/17, 0x11}, 0x10020) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00\x05\xc7O\x00', @ifru_flags}) [ 1416.909919] binder: undelivered death notification, 0000000000000000 17:07:19 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() r2 = add_key(&(0x7f0000000000)='syzkaller\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="356621ce23b7c090fa34bcb0356f4449f137345a40e7a8a0be1c8adc6dce31fa57874caa19cf181a4c57eb9bbff401bfb6f6660c53208715ef5edde4ca76504977b5600b3342777dd80b6bb27768fcc68f74375fb81d46a9fd212455fcab884323742bbd543a485747046db1307661e61458db4c74ee34415e6b7d6de18928fcdb46d0b0b0c264c73a54661addb24d19ddb215c645e8de099d89a4acb56815433df048c27e248ac8480dc0ff0d4df0", 0xaf, 0xfffffffffffffff8) keyctl$clear(0x7, r2) wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setregs(0xffffffffffffffff, r0, 0x3, &(0x7f00000002c0)="a3eff01d3755f40601db64a5aa35153244c2efba125da3be65d2d8602bbdddd78f2fa90ca4620e130a6b33d746d68208bd6b88776b36902da35c16d8ed9a39") setxattr$trusted_overlay_upper(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='trusted.overlay.upper\x00', &(0x7f00000001c0)={0x0, 0xfb, 0xf0, 0x5, 0x1, "7e38453f3d6fb0d088000b3d2a39c7bb", "2714f41706aa3640446cec611c12f040a9299b845a4b7d93a83b161b8674408288e14acd1831626fa18dca5bbad9c0dfeab4cd89b481c89fde124cf061c504be70fe34d7870d8872b217028b65a5d235957a61ae65866effab872ebd079b602f22a806c8c621b41092ee04dbe7859014a7db285907171b2f9bfade848f29e5cd05ad237ec6b06585360cece5812cefc7e4e905b5a89763e9bdd3842c82b5321fd43dfac698dfc7d7b8a5eaf5d4a041b554e29d10c522a772487fdbe19cd0cde56480822a122116ef9556ce784f3957ebcbd598229952aaac29826d"}, 0xf0, 0x3) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) 17:07:19 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0xfffffffe) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) io_setup(0x9, &(0x7f0000000000)) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00\x00') close(r0) 17:07:19 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f319bd070") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='lo\x00', 0x10) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000200)=0x4, 0x4) r3 = accept(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@loopback, @in=@multicast1}}, {{@in6=@remote}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) getgroups(0x0, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r3) getpeername$packet(r3, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r4, 0x1000008912, &(0x7f0000000800)="0adc1f123c123f319bc070") setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, [], 0x29}}}, 0x0, 0x8000, 0x0, "926a2864973c08cf181ff338860ee4a6fcb655883c4ddeb25e6f24783724e9e546c64c3023de083e086bb8b8c3e1cd87d7e0f4764e3a90cf5c22b4fc8308de176ae9d4a2e671f4f05d92ac40afb9a5fa"}, 0xd8) r5 = socket(0x10, 0x20000000000003, 0x0) sendmsg$nl_generic(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)=ANY=[@ANYBLOB="140000001e0005025a00"/20], 0x14}}, 0x0) chown(0x0, 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r2, 0x6685, &(0x7f0000000000)) r6 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/mls\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000480)={r6, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=""/127, 0x7f, 0xffffffffffffffff}}, 0x10) setsockopt(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) recvmsg(r6, &(0x7f0000000740)={&(0x7f00000004c0)=@xdp, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000540)=""/131, 0x83}, {&(0x7f0000000600)=""/78, 0x4e}, {&(0x7f0000000680)=""/58, 0x3a}], 0x3, &(0x7f0000000700)=""/17, 0x11}, 0x10020) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x1000000020000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ifreq(r7, 0x89f2, &(0x7f0000000180)={'ip6tnl0\x00\x05\xc7O\x00', @ifru_flags}) 17:07:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="056304cd00000000"], 0x0, 0x0, 0x0}) r2 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) syz_open_procfs(r3, &(0x7f0000002100)='fdinfo\x00') accept$packet(r2, &(0x7f0000002240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000002280)=0xfffffd3e) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000180)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, r4}, 0x14) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0xaf14113f02c18c41, 0x0, &(0x7f0000000680)}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:19 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000040)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000340)={0x54, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0763044000000000126348400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d94a79e6ac5cc59fb71709818b"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) write$P9_RRENAME(r2, &(0x7f0000000140)={0x7, 0x15, 0x1}, 0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) open(&(0x7f0000000180)='./file0\x00', 0x20000, 0x0) 17:07:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) r2 = dup2(r1, r1) ioctl$LOOP_SET_DIRECT_IO(r2, 0x4c08, 0xffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) getpid() r3 = dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000180)={{{@in=@initdev, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@mcast1}}, &(0x7f00000000c0)=0xe8) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x23}, r4}, 0x14) 17:07:19 executing program 5: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MRT6_ADD_MFC(r1, 0x29, 0xcc, &(0x7f0000000080)={{0xa, 0x4e23, 0x80000001, @mcast2, 0x3}, {0xa, 0x4e22, 0x6, @rand_addr="845c141355b598bfec8464ecfd03dbc5", 0x400}, 0x7fffffff, [0x6, 0x2, 0x25, 0x4, 0x9, 0x9, 0x9, 0x1]}, 0x5c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) exit(0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$unix(r2, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0) 17:07:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563044000000000230e78c26f083fcda98ae0600d961340049352732e8a6f006c84690f9e150e7fc2884b3f2464d070850689ae4ce1233467dd698880d918628782183ce3b91e114c35f4241b131b"], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0c630115"], 0x0, 0x0, 0x0}) r2 = dup(r1) ioctl$EVIOCGPHYS(r2, 0x80404507, &(0x7f00000000c0)=""/51) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) exit_group(0x9) [ 1419.176996] binder: 12374:12376 got reply transaction with no transaction stack [ 1419.186848] binder: 12372:12375 ioctl 4c08 ffffffff returned -22 [ 1419.187772] binder: undelivered death notification, 0000000000000000 [ 1419.189359] binder: 12372:12375 ioctl 4c08 ffffffff returned -22 17:07:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r1) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:19 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) clone(0xc000, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) clone(0x91001000, &(0x7f00000002c0)="c96aa9ae877bb06c9067da33d6f00bcb3b0936eaa11d296fc74628833119f1ebf71513a883e3d8d911fa5ea34c578d37ba57d45728d3fd3c95a22fe947579fd6629cad228b83c6e05859a442a71133b644deaa7ad3631a5534927b67f17122dde2ee18c8fae5dcee459e81b2507f0ed9ad16da0cb1872e2414c23259124f6c8ef21f8c25de3cf016bcbd43b32c558800505d898699176256e38007c442bd82111626cb70e8f5e4d9d8997dd568aaadcd8042e2dbd4fba63b27c569f99a6c1288f0ee3e8afe6cbf4a2e178f15065e427cf2af382879ce22352ae5f1552f9b58d896ba5cbfd15eae6cff245c3a3a78f3ba", &(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)="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") socket$inet6_udp(0xa, 0x2, 0x0) r1 = gettid() wait4(r0, 0x0, 0xffffffffffffffff, 0x0) ptrace$setopts(0x4206, r1, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x7) sendmsg$nl_netfilter(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x130, 0x6, 0x0, 0x700, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x1}, [@typed={0x6c, 0x7, @binary="e8f2f008cdcf4c1b3aefe0e4012e4ee2ca9a5a062daa5b2022e3f09a216eebbceb25800155344cd3713a60993851ffce003c4225107a8aa8ae5f02c66e8d304dda798c773286a96ab4033588a0dbd98778197cd743796a09f56ec757743b195bc76c070420"}, @typed={0x88, 0x6, @binary="7a4fcf5debf142d098398c57fcad1d9769e51fd3f7591401e83e6899f120a45664a663ebd0a695c182f424e985d5ef23c33fe956f46ce93f026c82f7ab69d87b92deaa0c7c9bd78317e52e4624190bd985558051e3d6e73b4954512025688d37617019b9c9d5933ba135322629f130b0bdae1f87031a1edc42db952bc9d4778af0c1aea7"}, @nested={0x28, 0x1a, [@typed={0xc, 0x80, @u64}, @typed={0x18, 0x44, @str='\'keyring,::-wlan1[(\x00'}]}]}, 0x130}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) r3 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x20c1) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$UI_END_FF_ERASE(r3, 0x400c55cb, &(0x7f0000000040)={0x6, 0x3f, 0x4}) ptrace$setopts(0x4206, r0, 0xcf, 0x0) tkill(r0, 0x34) [ 1419.189771] binder: undelivered death notification, 0000000000000000 [ 1419.210360] binder: 12384:12387 BC_CLEAR_DEATH_NOTIFICATION death notification not active [ 1419.212723] binder: 12384:12388 BC_CLEAR_DEATH_NOTIFICATION death notification not active 17:07:19 executing program 3: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x1, 0x0) mmap$binder(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0563044000000000d5e91f1e1708e9111790c4f5e3aa590013a3a0674867763cf29e89a3619e155435b196faf5b57182598287"], 0xfffffffffffffde8, 0x0, 0x0}) close(r1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) dup(r2) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) 17:07:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000000140)=[@acquire], 0x0, 0x0, 0x0}) close(r0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x8, 0x0, &(0x7f000000dff8)=[@release={0x400c630e}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f000000dfd0)={0x4, 0x0, &(0x7f0000000080)=[@enter_looper], 0x0, 0x0, 0x0}) r2 = dup(r1) write$FUSE_IOCTL(r2, &(0x7f00000000c0)={0x20, 0x0, 0x3, {0x3ab9, 0x0, 0x4, 0xffff}}, 0x20) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000000)=[@clear_death], 0x0, 0x0, 0x0}) [ 1419.235144] binder: 12390:12393 unknown command 352412428 [ 1419.235152] binder: 12390:12393 ioctl c0306201 2000dfd0 returned -22 [ 1419.235253] binder: 12390:12393 ioctl 80404507 200000c0 returned -22 [ 1419.241517] binder: undelivered death notification, 0000000000000000 [ 1419.260523] binder: undelivered death notification, 0000000000000000 17:07:19 executing program 4: clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x1200008, 0x0) clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f0000000000)) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x34) [ 1419.294579] binder: 12385:12396 unknown command -855350523 [ 1419.294587] binder: 12385:12396 ioctl c0306201 20012000 returned -22 [ 1419.301094] binder: 12405:12408 ioctl c0306201 20012000 returned -14 [ 1419.302240] binder: undelivered death notification, 0000000000000000 [ 1419.303548] binder: 12385:12396 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 17:07:20 executing program 2: r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) ioctl$ASHMEM_SET_SIZE(r0, 0x40087703, 0x7ffffffffffffffe) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0xfd02}, 0x28, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mmap(&(0x7f0000701000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) ioctl$ASHMEM_SET_NAME(r0, 0x40087708, &(0x7f00000011c0)='\x00\x00\x00\x80\x00\x00\x80\x00') close(r0) [ 1419.304365] binder: 12405:12409 ioctl c0306201 20012000 returned -14 [ 1419.329733] binder: undelivered death notification, 0000000000000000 [ 1419.337019] binder: undelivered death notification, 0000000000000000 [ 1419.360131] binder: 12385:12418 BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 1419.401028] binder: 12374:12376 transaction failed 29201/-71, size 0-0 line 2921 [ 1419.409614] binder: undelivered TRANSACTION_ERROR: 29201 [ 1419.421007] ------------[ cut here ]------------ [ 1419.428009] WARNING: CPU: 1 PID: 12425 at mm/util.c:546 __vm_enough_memory+0x41d/0x510 [ 1419.436946] memory commitment underflow[ 1419.441249] Kernel panic - not syncing: panic_on_warn set ... [ 1419.441249] [ 1419.448642] CPU: 1 PID: 12425 Comm: syz-executor.2 Not tainted 4.9.141+ #1 [ 1419.455633] ffff88019fe1fa60 ffffffff81b42e79 ffffffff82a38ce0 00000000ffffffff [ 1419.463638] ffffffff82a9de00 0000000000000001 0000000000000009 ffff88019fe1fb20 [ 1419.471697] ffffffff813f7125 0000000041b58ab3 ffffffff82e2b62b ffffffff813f6f66 [ 1419.479693] Call Trace: [ 1419.482268] [] dump_stack+0xc1/0x128 [ 1419.487609] [] panic+0x1bf/0x39f [ 1419.492603] [] ? add_taint.cold.5+0x16/0x16 [ 1419.498554] [] ? __warn.cold.8+0x14/0x2f [ 1419.504243] [] ? __vm_enough_memory+0x41d/0x510 [ 1419.510542] [] __warn.cold.8+0x2f/0x2f [ 1419.516068] [] ? do_futex+0x181/0x1a30 [ 1419.521595] [] warn_slowpath_fmt+0xc2/0x100 [ 1419.527545] [] ? __warn+0x1b0/0x1b0 [ 1419.532802] [] ? unmapped_area_topdown+0x38a/0x5d0 [ 1419.539356] [] __vm_enough_memory+0x41d/0x510 [ 1419.545480] [] security_vm_enough_memory_mm+0x96/0xb0 [ 1419.552298] [] mmap_region+0x4c1/0xf90 [ 1419.557814] [] ? selinux_mmap_addr+0x1f/0xf0 [ 1419.563847] [] do_mmap+0x53d/0xbb0 [ 1419.569024] [] vm_mmap_pgoff+0x168/0x1b0 [ 1419.574715] [] ? vma_is_stack_for_current+0xa0/0xa0 [ 1419.581359] [] ? do_futex+0x1a30/0x1a30 [ 1419.586960] [] ? SyS_clock_gettime+0x11e/0x1f0 [ 1419.593183] [] SyS_mmap_pgoff+0x152/0x1b0 [ 1419.598962] [] ? align_vdso_addr+0x60/0x60 [ 1419.604821] [] SyS_mmap+0x16/0x20 [ 1419.609902] [] do_syscall_64+0x19f/0x550 [ 1419.615597] [] entry_SYSCALL_64_after_swapgs+0x5d/0xdb [ 1419.623146] Kernel Offset: disabled [ 1419.626823] Rebooting in 86400 seconds..