10635df213fe93a1b60dd2287529637b3f334a9d5262d43fa47b446f59a99ab830dd647e641d71d9be2fc135e42327be589bd8bbbcd0f4fc69b5bb71ec568d320719c7baf0e657e3827b37aa6dc914e326919773985c4a6724ee8da5e459de25a3f8ac79e3380b46ee1314de63f99b148b3b69ac1", 0xd5}, {&(0x7f00000004c0)="781fad8699d8c9a79dfacde2a91f52965d1dd1e28ef81ed242581970e1ed5e0fc2b2bf8ecdef30efa1d79d78734481f1a828470e7c500542123fbf4e5b1fa4705bbbf32b8d9875492ca84b89426f457538f3d4fe639bda01db6b059ccdfc924f27c6eb195c890974ea6bd3a1124123b781f5f801069781dbd36baeec54a5de820072428954d18c10f671142d961b5aad663acc9f67f438119a5750197c19bb08af8a5a6576c7510ecba9c88adb74f66edcb30b533b805b36ee4a8e6a53b2a3f6aff8ba67baf444ee650656b9aa0afc3e6adbd36aa74cd9f8b0cd307dce46b3011539c624eede7ffe32a6ffc3f6ea529b3d43ac", 0xf3}, {&(0x7f0000000300)="9e13b84e80075165558b2c7f90a2ceef09f095015e9258c90875979a547244c24b04c68457b95b8a853097126e65709cfd817746eeffb0c01b4b95f0619acc689abcce390df3c4c378b8d1b6372a90f2c5a55d96ce4ac3796e08a798147125457c0638dac6", 0x65}, {&(0x7f00000005c0)="2fd97baec5f5f8bdfe02ca89e3555b6900ae37113df7400697f0e59af4f9ea3ed09b8741378c6af26d84", 0x2a}, {&(0x7f0000000600)="ac25b04cd5d43184891309c187817db8e8aa87091989e6d4e345d91daceed4e40a16308b88901cc107cb5b8bf5f1341770b1054866f4a59efa37f4bb9a9f737bcf81cd16b1637a46f8f6c116e4f1e90352c4fe6281a0ff5aac555287bbfee5ac52bcb880ce61f35b4e77841533f26750d5e9242e4ce3f289a2eaed1021208f9567492882f06d2993efe5006bef79528d1a606719ce10f2517338", 0x9a}], 0x9, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:06 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x80801) dup3(r1, r0, 0x0) 08:32:06 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 308.822802][T13411] debugfs: File '13409' in directory 'proc' already present! 08:32:06 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x408a00, 0x0) ioctl$KVM_TRANSLATE(r1, 0xc018ae85, &(0x7f0000000080)={0x4, 0x110000, 0x1, 0x4, 0x7ff}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 308.900339][T13411] binder_alloc: 13409: binder_alloc_buf, no vma 08:32:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) dup3(r1, r0, 0x0) [ 308.961256][T13411] debugfs: File '13409' in directory 'proc' already present! 08:32:07 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:07 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x4000) sendto$unix(r0, &(0x7f00000000c0)="3277e291e82351c95bf1f79a3be6fc571a42c9e329fe02507ddb35b039519fa7c6485a0c9bcf0ca9", 0x28, 0x8000, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:07 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$SIOCRSGL2CALL(r0, 0x89e5, &(0x7f0000000000)=@null) ioctl$PPPIOCSMRU(r0, 0x40047452, &(0x7f00000000c0)=0x17c3550d) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4) write$FUSE_LSEEK(r0, 0x0, 0x0) accept4$inet(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, &(0x7f0000000080)=0x10, 0x800) [ 309.020437][ T12] binder: unexpected work type, 4, not freed 08:32:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x1200, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:07 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e21, @broadcast}}) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) recvfrom$packet(r2, &(0x7f00000003c0)=""/165, 0xffffffffffffffd4, 0x94ea888b520d7065, &(0x7f0000000480)={0x11, 0x19, r3, 0x1, 0x1f85c00, 0x6, @dev={[], 0x2a}}, 0x14) 08:32:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0x8040) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0x10f001, 0xf004, 0xf, 0x800, 0x101, 0x3, 0x3f, 0x1ff, 0x1, 0xff, 0x100, 0x2dd}, {0x5000, 0x1000, 0xe, 0x6120431a, 0x1, 0x400, 0x0, 0x4, 0x2, 0x5, 0x5ba, 0x2}, {0x0, 0x0, 0xf, 0x3f, 0xd877, 0x5, 0x5, 0x6, 0x3, 0x595, 0x401, 0x1}, {0x3001, 0x3001, 0x10, 0x10001, 0x7aa, 0x80, 0x6, 0xf3, 0x4, 0xc47, 0x6, 0x9}, {0x3001, 0x10f000, 0x8, 0x8, 0x5fa0846f, 0x4, 0x46a, 0x2, 0x4389a066, 0x400, 0x3, 0x7fff}, {0x3001, 0xd000, 0x0, 0x200, 0xbd8, 0x0, 0x1, 0x3, 0x3, 0x9, 0x80000000}, {0xf004, 0x4000, 0x0, 0x6, 0x6, 0x9, 0xfffffffffffffff7, 0x42024faf, 0x2, 0x9, 0x8, 0x40}, {0x100000, 0x0, 0xf, 0xffffffffffff0346, 0x9, 0x10000, 0x4, 0x7, 0x7, 0x1ff, 0x1, 0x9f7}, {0x3004, 0x3000}, {0xf000, 0x2000}, 0x0, 0x0, 0xf000, 0x200000, 0x0, 0x8001, 0x2, [0x3, 0xffffffffffffffff, 0xd4564f1, 0x100000000]}) dup3(r1, r0, 0x0) symlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') [ 309.289774][T13455] debugfs: File '13450' in directory 'proc' already present! 08:32:07 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000003c0)=ANY=[@ANYBLOB="6f73327028f361ea1ffdd38eb88b20420f42e2591e0272ed2af80bf8aedb19fc8254b55b248207984af9daf4c9e20dd240fc3e9e3a0f48a435dfd9743e27fc82902239597e70d2d91bf2d5446d813af66a90a276cf125068de5422651b2eaeafafcf7c05b09034b30000a908645397e683ca44d9f18c5bddb07c8f697a0219f353bdf06b363555fb9ded4fe93a528c5d7c06d4250396f7ca263dd74cde155ce5e70318830889a0ea1d915deeb371b823ae8b41ae099adcba426cf9afe39012d039671781be3b260900000043e6d958bb8c1117a956d5d336d957dd32ab030120fbbf04000000de95cf0a8c9beb3db4c7c482f25e7364a5c30341ccb6b8dcae47e28a3ac278f4204aa5cc1d35c7eae44adcb7d75879280bf78a1db64b9edb07d204c5a2993ea2f3fc2ab388c7b669488f74f8ac3894ee62e84151ea6d95fc4315b25b496349c4757ac48ca7cf61a0a02109d1979f0868b11d26382301f6dc9b8c2f718b62cf378579ec51373e95d22b1b5c4293071482e66d9eb96a7b5495af3449b2264cfda6aeef1500bc81dc34fc81dd56acf9aadbd15d27f0dba65ca7953a941235cc6972566001fd0646b1"]) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:07 executing program 0: r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000180)={@pptp={0x18, 0x2, {0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {&(0x7f0000000040)=""/255, 0xff}, &(0x7f0000000140), 0x61}, 0xa0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LSEEK(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000016c0)={{{@in6=@local, @in=@loopback}}, {{@in6}, 0x0, @in=@broadcast}}, &(0x7f00000017c0)=0xe8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') r3 = socket$inet6(0xa, 0x80001, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000000)={'team0\x00', 0xd800}) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x400000000000000, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], 0x1) r4 = socket$inet6(0xa, 0x1000000000002, 0x0) r5 = socket$nl_generic(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f0000000040)=@ethtool_test={0x1a, 0x948, 0x1ff, 0x4, [0x2, 0x0, 0x5, 0x7afc]}}) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0xb, 0x0) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000440), &(0x7f0000000540)=0x14) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100), 0x4) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f0000000500), &(0x7f00000004c0)=0x335a23703b45f0a2) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000140)=0x49, 0x4) ioctl(r4, 0x8912, &(0x7f00000000c0)="0a5cc80700315f85715070f5ba914d5b9fbd8015889f91c4f72544832cdba6734a7c41c725d83aa5a1d7b7707f16d353bef0f4762c235eea8289ec5753ac9cc37f5e51ddad28bf92e18651ca5ddfdbd7c16ec91912761158994d382344a4646e2fa9f202971cef1c02f7e59055ccb8b0376f9188f8f0dc7fc802addc1aa84de736fb8d6cdbc14e5829133ef5963403f42a448253fb07503b884646dd2ff99d1ce677ff8afd536090188ae7c6542201f03db4d9457dfc33c51c96a9397c030c8fc29676690f6a5a32f3c6688789b608dee06325ee12f40ca0ceb9e63df60abcff61593cba56b13d5030563e0e01b950af4f20aeba88a4de9c") ioctl$sock_SIOCINQ(r3, 0x541b, &(0x7f0000000480)) r7 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) accept4$llc(r7, &(0x7f0000000780)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f00000007c0)=0x10, 0x80000) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], 0x1) getsockname(r6, &(0x7f00000003c0)=@hci, &(0x7f0000000740)=0xffffffffffffff75) ioctl$FS_IOC_SETFSLABEL(r4, 0x41009432, &(0x7f00000001c0)="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") 08:32:07 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x100000001, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x0, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 309.370871][T13455] binder_alloc: 13450: binder_alloc_buf, no vma [ 309.469582][T13455] debugfs: File '13450' in directory 'proc' already present! 08:32:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0xfffffffffffffffd, 0x800801) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x1, 0x0) ioctl$KVM_GET_FPU(r2, 0x81a0ae8c, &(0x7f0000000080)) dup3(r1, r0, 0x0) 08:32:07 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x6) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 08:32:07 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) faccessat(r0, &(0x7f00000000c0)='./file0/file0\x00', 0x2, 0x1600) ioctl$DRM_IOCTL_ADD_BUFS(r0, 0xc0206416, &(0x7f0000000100)={0x6, 0x80000001, 0x6, 0x4, 0x4, 0x8001}) 08:32:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x3f00, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:07 executing program 1: getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@loopback, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@empty}}, &(0x7f00000004c0)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$hfsplus(&(0x7f0000000000)='hfsplus\x00', &(0x7f0000000040)='.\x00', 0xfffffffffffffff8, 0x4, &(0x7f0000000300)=[{&(0x7f0000000080)="71b206a880b34f7b351d90d4cf7660c5d529b1d4bcca5beda6a592b8d08f054d5fd0755f501723a6039ac982d10c5605179a6e1fabc9bc6d9ec2a08e6322134fff296b78c03058bb59d216c992e1dcbaf12b49df920b00ef46c5234623ff6baffae819ed1e32e928904de329efd1f5cf0c38245da583aae35cf9bf12a54639a7dfce4e7bc21ef71f707af3c1001dd6e953b312d710a4d147ce1e257d7d03437c5f52107cd0a3662aa5d20d7319390fb7a68a598a2903817cc7637095f4b39e58bf18f9e8d3589f66b201f0eb98078649e2aa845f050eb3c2916c72812cc472d477d82ab624012ffbf9dfa5a315921691076b6e3a", 0xf4, 0x2}, {&(0x7f0000000180)="9f8f8bc8f611572587ca77f0d254ddf67d22a581fb4acc1b0757b8c48c73762427c5b51154bec0688170440b93791197ff3ccde9a0fa8480c1352448a73017a48a0a53890eeec221773835af9150e49cbd3a52f7f75915", 0x57, 0x8000}, {&(0x7f0000000200)="a1be8415f42aa231924687b09fea7dbadee0c272e77f7bb6309e82ad2f20870ff90ee0bbf922d03686df468205", 0x2d, 0x9cb}, {&(0x7f0000000240)="86cf492311526de8fe09f4f28426bf3dd74023f4975beab90b359f9d92d9e3a97b936d3ecdfa198ad27862938b9dd207f172593af5d3ef001006016a159e6087d901a72ba42b7cf403da1a82984471671febed9f8c7e8270d6bd76281c74809e1ea29dbe043319630849b06ea64720881fdb21f91d5f52837044b99091856575fae614c2c4812542f486be7d887bbf8d8694cab8af64975ae61a618d", 0x9c, 0x47df}], 0x2000, &(0x7f0000000600)={[{@type={'type', 0x3d, "95c64da1"}}], [{@fowner_eq={'fowner', 0x3d, r0}}, {@measure='measure'}, {@obj_type={'obj_type', 0x3d, '/selinux/checkreqprot\x00'}}, {@euid_eq={'euid', 0x3d, r1}}, {@fsmagic={'fsmagic', 0x3d, 0x6}}, {@pcr={'pcr', 0x3d, 0x2}}, {@fsmagic={'fsmagic', 0x3d, 0x1}}, {@fowner_gt={'fowner>', r2}}]}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_LSEEK(r3, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000700)={0x0, 0x6, 0x10, 0x4, 0x7}, &(0x7f0000000740)=0x18) setsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000780)={r5, 0x40, 0x6d9, 0x10001}, 0x10) 08:32:07 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd989}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x40) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) r3 = eventfd2(0x0, 0x0) dup3(r3, r0, 0x0) 08:32:07 executing program 5: r0 = memfd_create(&(0x7f00000001c0)='\x00'/10, 0xffffffffffbfffff) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000080)={0x0, 0xa2db}, &(0x7f0000000100)=0x8) ioctl$RTC_WIE_ON(r1, 0x700f) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x3, 0x7, [0x7, 0x5, 0x81, 0xf427, 0x7, 0xdc, 0x4]}, 0x16) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 309.865626][T13501] debugfs: File '13497' in directory 'proc' already present! 08:32:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) pivot_root(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file0\x00') r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x1, 0x0) ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xbac) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 309.922499][T13501] binder_alloc: 13497: binder_alloc_buf, no vma [ 309.953729][T13501] debugfs: File '13497' in directory 'proc' already present! 08:32:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x4000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:08 executing program 2: r0 = eventfd2(0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 310.202247][T13529] debugfs: File '13526' in directory 'proc' already present! [ 310.236777][ T12] binder: unexpected work type, 4, not freed [ 310.244546][T13529] debugfs: File '13526' in directory 'proc' already present! [ 310.256656][ T12] binder: unexpected work type, 4, not freed 08:32:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd989}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x40) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) r3 = eventfd2(0x0, 0x0) dup3(r3, r0, 0x0) 08:32:08 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00'/10, 0x3) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000ba6c2d54000000000000000000000020"], 0x2b) r1 = open(&(0x7f00000003c0)='./file0\x00', 0x40000, 0x40) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$setpipe(r0, 0x407, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x6, 0x4000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@multicast2, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) bind$bt_hci(r2, &(0x7f0000000240)={0x1f, r3, 0x3}, 0xc) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, &(0x7f00000002c0)={'filter\x00', 0xb6, "bf269ce79b913f8fd8f1cba38ba3beaaf2799d1685ef6b897d7e74a00de6ee7355ecfe1c5624e2d70a84ffd941b67a90d56ba7b5fb07d7e31f08db4a138676b5d466c48b0c7cb4df68ae153629d01a4a53135a3447797107967131f1c43da31052d7ca76cb6838526380c12e716f9aa479861dd2e00fef0536374987e10d1692876712ae5db1e062fa2f221394407a894614decd0fc65e530f83155110f30b8c5eb20aed1b64d55acead051098d73427cfdbc9c7b71e"}, &(0x7f0000000040)=0xda) 08:32:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x1000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:08 executing program 4: mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000000)='./file0/../file0\x00', 0x0) 08:32:08 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) syz_open_dev$video4linux(&(0x7f0000000040)='/dev/v4l-subdev#\x00', 0x7, 0x20000) r1 = eventfd2(0x0, 0x0) dup3(r1, r0, 0x0) 08:32:08 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x7) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 310.502169][T13544] debugfs: File '13542' in directory 'proc' already present! 08:32:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x1, 0x8000) r1 = semget(0x2, 0x1, 0x6) semctl$GETZCNT(r1, 0x0, 0xf, &(0x7f0000000180)=""/66) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0/file0\x00', 0x80000, 0x81) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000100)=[r2, r3], 0x2) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000240)=0x4) [ 310.555866][T13544] debugfs: File '13542' in directory 'proc' already present! 08:32:08 executing program 2: r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x101000) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffff9c, 0x84, 0x14, &(0x7f0000000340)=@assoc_value={0x0}, &(0x7f00000000c0)=0x8) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80584448}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x20, r2, 0x20, 0x70bd2b, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24004000}, 0x4000) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={r1, 0x100, 0x1, [0x7]}, 0xa) r3 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r4 = eventfd2(0x0, 0x0) accept$nfc_llcp(r0, &(0x7f0000000140), &(0x7f00000001c0)=0x60) dup3(r4, r3, 0x0) 08:32:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd989}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x40) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) r3 = eventfd2(0x0, 0x0) dup3(r3, r0, 0x0) 08:32:08 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x2000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:08 executing program 5: r0 = dup(0xffffffffffffff9c) readlinkat(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/21, 0x15) r1 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:08 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8100) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:08 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000000, 0x200000) ioctl$CAPI_SET_FLAGS(r2, 0x80044324, &(0x7f0000000080)=0x1) dup3(r1, r0, 0x0) 08:32:08 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd989}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x40) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) r3 = eventfd2(0x0, 0x0) dup3(r3, r0, 0x0) [ 310.942407][T13577] debugfs: File '13576' in directory 'proc' already present! [ 310.981529][T13577] binder: BINDER_SET_CONTEXT_MGR already set [ 310.987634][T13577] binder: 13576:13577 ioctl 40046207 0 returned -16 08:32:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x80000, 0x0) write$P9_RREADDIR(r0, &(0x7f0000000180)={0x141, 0x29, 0x2, {0x8, [{{0xe0, 0x3, 0x4}, 0x6, 0xfffffffffffffffe, 0x7, './file0'}, {{0x2, 0x3, 0x6}, 0x6, 0x4, 0x7, './file0'}, {{0x10, 0x3, 0x4}, 0x10000, 0x61c26b71, 0x7, './file1'}, {{0x10, 0x1, 0x3}, 0x795a, 0xffffffff828abdd8, 0x7, './file0'}, {{0xa4, 0x3, 0x7}, 0xfffffffffffff1c2, 0x7, 0x7, './file0'}, {{0x10, 0x1, 0x4}, 0x4, 0x95, 0x7, './file0'}, {{0x81, 0x0, 0x1}, 0x4, 0x3ff, 0x7, './file0'}, {{0x40, 0x0, 0x1}, 0x100000001, 0x2, 0x7, './file0'}, {{0x80, 0x1, 0x2}, 0x801, 0x2, 0x7, './file0'}, {{0x4, 0x0, 0x2}, 0x7, 0x100000000, 0x7, './file0'}]}}, 0x141) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 311.054720][T13589] binder_alloc: 13542: binder_alloc_buf, no vma [ 311.077344][T13577] debugfs: File '13576' in directory 'proc' already present! [ 311.096240][T13589] binder: BINDER_SET_CONTEXT_MGR already set 08:32:09 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1400) [ 311.102422][T13589] binder: 13576:13589 ioctl 40046207 0 returned -16 [ 311.118634][T13592] binder_alloc: 13542: binder_alloc_buf, no vma 08:32:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x3000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:09 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000080)={0x0, 0x100000000}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000100)={r1, 0x8}, 0x8) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000040)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd989}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x40) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) eventfd2(0x0, 0x0) 08:32:09 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000000c0)={0x0, @src_change}) r1 = eventfd2(0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000080)={0x4000, &(0x7f0000000040), 0x4, r1}) 08:32:09 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x2}, 0x7) r1 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 311.303603][T13604] debugfs: File '13600' in directory 'proc' already present! 08:32:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x68, r2, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xd989}, @IPVS_CMD_ATTR_DAEMON={0x20, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x13}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5d94}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x3ff}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xfffffffffffffff8}]}, 0x68}, 0x1, 0x0, 0x0, 0x805}, 0x40) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f00000000c0)) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 311.403909][ T12] binder: unexpected work type, 4, not freed [ 311.411621][T13604] debugfs: File '13600' in directory 'proc' already present! [ 311.433656][ T12] binder: unexpected work type, 4, not freed 08:32:09 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x4000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:09 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80000, 0x0) bind$bt_rfcomm(r1, &(0x7f0000000100)={0x1f, {0x20, 0x5, 0x7fff, 0x1, 0x0, 0x8000}, 0x7}, 0xa) write$binfmt_elf32(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="7f454c46000000000000004200000000030042581ce11ae7c71600003800000000000000000000000945d90d277008bbc24ed38ff23f3cdc22dfb9f7b58769aa3f0929185f664f4d2ea1bbcfdb2fd513528f7e00bb2ef4c6fe880141f28288ce7414279406898b9b87022f0e41049f01eb8b7517f7e5e430dc70e5f17583069d4834097b5ea30effb1ee173e8777f011000000000000000000"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = syz_open_pts(0xffffffffffffff9c, 0x7fffd) ioctl$sock_bt_hci(r0, 0x0, &(0x7f0000000180)="9c9cac6d67c235595a147e379c054013988f7eef16109ce869377aa998f8263921be3ffa5610b909ab1a3c1b7ffa00835663e388bad4afa8be850ff05dbc01a98e7070a8a62f5542500a297ae7d5d250f061e79edc97b5f6d7eae1f9f84851fd0ba662b88c7c89d4acf2bffcd515a387c47555fa291f21c6fbd20c55d7ae47d7a8807b2ecb6223ea16376f2f9e903406ead0fa7eecf1632dcc44de5c9f0f0b16249acc3a4c1097c12e71e0f90e1208e75d3ff21ab045b57b3a6d7998f1996ffbbec577b5fd37c620d01507ae794c00eb529f0abe7228d9c98ac2509929596c9da79bcbacc2c1d80fa2d0d1") ioctl$KDGKBMODE(r2, 0x4b44, &(0x7f00000000c0)) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x10002, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000480)={{{@in=@multicast1, @in6=@ipv4={[], [], @multicast2}}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) [ 311.655093][T13634] debugfs: File '13631' in directory 'proc' already present! [ 311.694541][ T25] binder: unexpected work type, 4, not freed 08:32:09 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) 08:32:09 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x7b, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000200)='bfs\x00', &(0x7f0000000240)='./file0\x00', 0x3, 0x3, &(0x7f0000000500)=[{&(0x7f0000000280)="c2d67d99cd4c6081734420f717e6c2b3f6906273f9b8046e32973dd62bbe58918d7bd8db7faebea7a3437966257475ca8b2885515364fdbc5b6969cd6f308a1e88bd0f0997bf04499a2fa9a572f2f1e1bb2a7f3479c16f7241a0cf8ad21068d1da155e0426dbd255ede5f020a1ce29d05196d0b455345a86d661713353adf8b3bba8537a9cb20c0cf59f39b2254f4ad2ad8cbbaf25245bbfb755df1603cfe35d63b32da22e3cb64037dd7541a5e6b6c0e64e24fdb13d747ad0e55cd5ed145686d859059ac641dce1331095b138ba17817aa8598984c1b4934339bf3a39f7872c9a8fc9e35552b23f20dbc5", 0xeb}, {&(0x7f00000003c0)="18d5340e1bb1fad617837b63f79087e2eafc06fc757a135eca9b935bcee45b74290e832a4763da2a2cd7628e82fcb17e95482f1283c348a20914e9936be1c10e914fdec4d7277e12350403083c4b1011c2ef5f8bd5da95bef9048761bbd198dffdc107619e6a84be6ffb95d87da497960c6456aa10c449d7b3c8f14022604561387960a317342f9a", 0x88, 0x6c1}, {&(0x7f0000000480)="d00604ba9cee298088f670737574ac7506cffa64ab391f99c39d2a0621e0d200631dadaec6e75a90c6ec85a5d791d7b963e1bba47a2e3d2fb8822c5987656028b18d7761725eca91050564f95d76b3864ef074d8efd13ee796672d07", 0x5c, 0x100000000}], 0x0, 0x0) setxattr$security_smack_transmute(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000001c0)='TRUE', 0x4, 0x1) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 311.702083][T13634] debugfs: File '13631' in directory 'proc' already present! [ 311.709651][ T25] binder: unexpected work type, 4, not freed 08:32:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x5000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:09 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={0xffffffffffffff9c}) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {r1, 0x20}, {r1, 0x1}, {r0, 0x1}, {r1, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 311.892095][T13652] debugfs: File '13649' in directory 'proc' already present! [ 311.938413][ T25] binder: unexpected work type, 4, not freed [ 311.949639][T13652] debugfs: File '13649' in directory 'proc' already present! [ 311.988957][ T25] binder: unexpected work type, 4, not freed 08:32:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x3, 0xffffffffffffffff) dup3(r1, r0, 0x0) 08:32:10 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x14) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000)={0x3f, 0x401, 0x401, 0x4, 0x200}, 0x14) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f00000001c0)={@initdev}, &(0x7f0000000200)=0x14) bind$packet(r0, &(0x7f0000000040)={0x11, 0xf7, r2, 0x1, 0x10000, 0x6, @remote}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000180)={'veth1_to_bond\x00', {0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1e}}}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000080), &(0x7f0000000140)=0x4) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000180), 0x0) 08:32:10 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7fa8644600000000000000000300030000000000000000e87e8acc415597d6000000000000002000000000"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat(r0, &(0x7f0000000100)='./file0\x00', 0x40000, 0x0) 08:32:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x6000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:10 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {r0, 0x1}, {0xffffffffffffffff, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:10 executing program 0: ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x24}, {0xffffffffffffffff, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 312.259765][T13683] debugfs: File '13679' in directory 'proc' already present! 08:32:10 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f0000000000)={0x10000, 0x6, 0x1, {}, 0x0, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x7ff, 0x8000) 08:32:10 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460000000000000000000022343835f35377647b34d000000700030000003d66f4ecc7bd1c6e0000"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$setstatus(r0, 0x4, 0x40000) [ 312.332139][ T12] binder: unexpected work type, 4, not freed [ 312.349534][T13683] debugfs: File '13679' in directory 'proc' already present! 08:32:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@remote}}, &(0x7f0000000100)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000004c0)=0xc) r5 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000900)='/selinux/status\x00', 0x0, 0x0) ioctl$KVM_SET_SREGS(r5, 0x4138ae84, &(0x7f0000000940)={{0x0, 0x0, 0xe, 0x0, 0x7, 0x1, 0x5, 0x22, 0xffffffffffff0000, 0x2c, 0x7be, 0x3}, {0x4000, 0x100000, 0xb, 0xe9d7, 0xffe, 0xcc5, 0x6, 0x2, 0x5, 0x2, 0x3, 0x7}, {0xf000, 0x4000, 0x3, 0x5, 0x800, 0x6, 0xe39, 0x7, 0x7, 0x0, 0x3ff, 0xffffffff80000000}, {0x1000, 0x11000, 0x5cfa3aef8cc3cf5b, 0x7, 0x5, 0x1, 0x9, 0x53, 0x84, 0x7, 0xb98, 0x7}, {0x6000, 0x0, 0xb, 0x10001, 0x4a8e, 0xffa2, 0x0, 0x2, 0x3, 0xffff, 0xfffffffffffffffe, 0x8}, {0x5000, 0x5000, 0xf, 0x3f, 0x9, 0x3, 0x401, 0x1, 0x7fff, 0x4, 0x579, 0x8}, {0x15000, 0xf002, 0x0, 0x1, 0x1, 0x808, 0x7, 0x4, 0x5c, 0x3, 0x9, 0x2}, {0x10000, 0xf002, 0xb, 0x3ff, 0x0, 0x277e, 0x4, 0xf, 0x80000000, 0x1200000, 0xffffffff, 0x4}, {0x1f000, 0x107000}, {0x6000, 0x5002}, 0x40000008, 0x0, 0x1000, 0x200008, 0x8, 0x1001, 0x1006, [0x1, 0x44, 0xc9, 0x1]}) setxattr$system_posix_acl(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x1, 0x4}, [{0x2, 0x2, r0}, {0x2, 0x4, r1}, {0x2, 0x4, r2}, {0x2, 0x4, r3}], {0x4, 0x3}, [{0x8, 0x3, r4}], {0x10, 0x2}, {0x20, 0x6}}, 0x4c, 0x2) chmod(&(0x7f0000000080)='./file0\x00', 0x0) getsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000a80), &(0x7f0000000ac0)=0x8) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000640)='/dev/ubi_ctrl\x00', 0x4002, 0x0) io_setup(0x9, &(0x7f0000000580)=0x0) io_submit(r7, 0x3, &(0x7f00000008c0)=[&(0x7f00000005c0)={0x0, 0x0, 0x0, 0xf, 0x8, r6, &(0x7f00000006c0)="e2537def5719b65c0b144ec2e4911d3ffdb81fa2b0f04f395afc697828846437e13adb938ef7583fdedaa7b64956923d51af5e356d769ac661a110bf720f02f003a2ef3763dae3641467e2975583a84d7b83fdbe782a4ea57eb42e5b4ed545461c713c995a4243fbe63fe3d79f0206f8b46481b3a7dc4e2261f383fffc8f3ffd00639ea8512c46b9c71c075e84cb6e1bab0d285365a1dbd28a1fa2909f3da89863d9a8f2d124fdf554cbbe3cdb7b171664543df2c9423818a01d62e6659b9772f22b93bf6e6d1b7cff45c9cdadad04a02836dadc09cb157e96a7571e1d0a43f96ce4aed82f4685a6d3749c530350746a0959167b3e056cf7d296d9c6025e", 0xfe, 0x9, 0x0, 0x3, r6}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0x6, r6, &(0x7f0000000600)="944e26f61f33bea7a398c2470161e75cbc658e5a76ec8ca08f11d91d7fc3f687ef0d27da7c81051c3efca2c7851c", 0x2e, 0x9, 0x0, 0x0, 0xffffffffffffff9c}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x3, 0x10001, r6, &(0x7f0000000800)="ad74244584cd75c55deb47a922660d7058f335a4541e3187b0fc43f0515d06dc2106e9a27cda77cc33ca7915b41abcf06c401081b8dbc943afcdd5d8c79e2c43995a55da61b10b56a995f2ac8608dba74ffd883237ea9af1ec7bc45595c537f5e84c1364e9d11819858987b2", 0x6c, 0x80000001, 0x0, 0x2, r6}]) setsockopt$inet_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f0000000680)=0x7, 0x4) [ 312.385891][ T12] binder: unexpected work type, 4, not freed 08:32:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x5, 0x101000) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x2, 0x3, 0x3, 0x4, 0x104cc47c, 0x1a}, &(0x7f00000000c0)=0x20) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x2200, 0x0) dup3(r1, r0, 0x0) 08:32:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x7000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:10 executing program 0: ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x24}, {0xffffffffffffffff, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:10 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={r2, &(0x7f0000000040)=""/144}) [ 312.616507][T13711] debugfs: File '13706' in directory 'proc' already present! [ 312.698976][T13711] debugfs: File '13706' in directory 'proc' already present! [ 312.715490][T13718] binder_alloc: 13706: binder_alloc_buf, no vma 08:32:10 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0xfff, 0x111000) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f0000000080)) r2 = eventfd2(0x0, 0x0) dup3(r2, r0, 0x0) 08:32:10 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x2, 0x440) ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0) 08:32:10 executing program 0: ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2001}, {0xffffffffffffffff, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x1}, {0xffffffffffffffff, 0x24}, {0xffffffffffffffff, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:10 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/checkreqprot\x00', 0x800000002001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x2000, 0x0) 08:32:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x12000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:10 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$RTC_IRQP_READ(r0, 0x8008700b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000240)='./file0\x00', 0x40) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) write$P9_RFSYNC(r0, &(0x7f0000000080)={0x7, 0x33, 0x2}, 0x7) getsockname$unix(r0, &(0x7f0000000300)=@abs, &(0x7f0000000200)=0x6e) 08:32:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x1) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x6, 0x101400) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) r2 = eventfd2(0x0, 0x0) dup3(r2, r0, 0x0) 08:32:11 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {r0, 0x1}, {0xffffffffffffffff, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:11 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) sendmmsg$alg(r0, &(0x7f0000000240)=[{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="72a63a7eef9e9b163cae36637ca2f26935463a108608043add14d712983edf5686bcdceadf947146ffea9ae89119", 0x1}, {&(0x7f0000001180)="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", 0xfffffffffffffe90}, {&(0x7f0000000080)="1160eff571", 0x5}], 0x3, &(0x7f0000000100)=[@assoc={0x18, 0x117, 0x4, 0x3}], 0x15, 0x40}, {0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000000140)="a38294b2eeeefe2924705e98ff0b8156a7806962a871a7de1a6cb9da98452d4b407d5923053b6c284dce25462704fe106d2ab1a9596d8911371318173624220f8ce80f050f259f6248131982fe2213ae125696c948c6cc82810f36317a031997420083fb51d56d03cfd48153c8c642fbe10a01bc9b0358bccc37eccf0d165ea5990bf0332bf02ffa7757d732d6b5d20316cdbbb25c126f291172e9b1bf0a09", 0x9f}], 0x2, 0x0, 0x2f0, 0x2000c010}], 0x2, 0x20008800) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) ioctl$RTC_WIE_OFF(r1, 0x7010) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f00000002c0)=""/124) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000340)=0x3, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_TSS_ADDR(r0, 0xae47, 0xd000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LSEEK(r1, 0x0, 0x0) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000003c0)=""/143) [ 312.993068][T13740] debugfs: File '13735' in directory 'proc' already present! [ 313.070361][ T25] binder: unexpected work type, 4, not freed [ 313.077617][T13740] debugfs: File '13735' in directory 'proc' already present! 08:32:11 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00\x1b\b?@\xa6\xdb\x9d\xec[H\xd5u\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x3) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f089966610000000000000000000000030003000000000000000000380000000000000020000000000020022a99097f58ee25319280a3253709eec565679c191e398891b62a90746320f28182dadfbb8047e02c30b580614dfa08ffd04832922d2c4713cb0671170424655179ada66d8d0b4e41e1f7cf5bbf1c95a08dec718202662547932ac23d1f6b73a25745b7b10e2a91c0b677e82bf021d58a5e36e2947bccf8a2f0ecd72957304cc0f477eae196cb70914df286a152160d6d11bb7617c35a19308188c1d22ac269ad98e60210b138dc4218a485f7a7b01489b2cb19341223fb343c1f9232459114c1ea4c066335"], 0x2b) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0xff, 0x89, 0x2, 0x10001}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 313.170183][T13751] binder: BINDER_SET_CONTEXT_MGR already set [ 313.176320][T13751] binder: 13735:13751 ioctl 40046207 0 returned -16 08:32:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000080)={0x10000, 0x9, 0x4, 0x20010, {0x77359400}, {0x3, 0xa, 0x1ff, 0x9, 0x100, 0x3, "a663d49b"}, 0x100000001, 0x2, @planes=&(0x7f0000000040)={0x3, 0xb3, @fd=r1, 0x8}, 0x4}) ioctl$VIDIOC_G_PRIORITY(r2, 0x80045643, 0x3) 08:32:11 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000180)={0x2, [0x4, 0x5]}, 0x8) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:11 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) ioctl$FICLONE(r1, 0x40049409, r0) 08:32:11 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {r0, 0x1}, {0xffffffffffffffff, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x3f000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:11 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="7f4500030003000000000000000000000020100000000300"/43], 0x34e) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:11 executing program 0: r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {r0, 0x1}, {0xffffffffffffffff, 0x24}, {r0, 0x8000}], 0x7, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) dup3(r1, r0, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/load\x00', 0x2, 0x0) [ 313.487414][T13784] debugfs: File '13781' in directory 'proc' already present! 08:32:11 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x2) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:11 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, 0x5, {0x7, 0x1f, 0x5, 0x40000, 0x50, 0x4, 0x3, 0x5}}, 0x50) getpgrp(r2) syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$PPPIOCGUNIT(r0, 0x80047456, &(0x7f0000000000)) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 313.591812][T13784] debugfs: File '13781' in directory 'proc' already present! 08:32:11 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:11 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1500) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x80000, 0x0) write$P9_RCREATE(r1, &(0x7f0000000080)={0x18, 0x73, 0x1, {{0x10, 0x4, 0x1}, 0x4}}, 0x18) 08:32:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x40000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:11 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x7, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @bcast, @rose={'rose', 0x0}, 0x1000, 'syz0\x00', @null, 0x6, 0x8, [@null, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:11 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x1, 0x800) dup3(r1, r0, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) 08:32:11 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cachefiles\x00', 0x440, 0x0) accept4$unix(r0, &(0x7f00000001c0), &(0x7f0000000240)=0x6e, 0x80800) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:11 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:12 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003100000000000000000380000000000622f8e693564b98d60"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 313.979816][T13822] debugfs: File '13820' in directory 'proc' already present! [ 314.012525][ T25] binder: unexpected work type, 4, not freed [ 314.023846][T13822] debugfs: File '13820' in directory 'proc' already present! 08:32:12 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:12 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xccf, 0x10102) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r0, 0x4010ae68, &(0x7f00000000c0)={0x4, 0x8000}) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) r2 = getpgid(0xffffffffffffffff) mq_notify(r1, &(0x7f0000000040)={0x0, 0x17, 0x0, @tid=r2}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_LSEEK(r1, 0x0, 0x0) [ 314.064488][ T25] binder: unexpected work type, 4, not freed 08:32:12 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x180, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1, 0xa010, r0, 0x0) utimensat(r0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={{0x77359400}, {0x0, 0x2710}}, 0x100) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000200)='./file0\x00', 0x11a) 08:32:12 executing program 2: r0 = syz_open_dev$usbmon(&(0x7f0000000040)='/dev/usbmon#\x00', 0x40, 0x300) ioctl$RTC_AIE_OFF(r0, 0x7002) r1 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) eventfd2(0x0, 0x0) dup3(r1, r1, 0x0) 08:32:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0xfdfdffff, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 314.299560][T13849] debugfs: File '13844' in directory 'proc' already present! 08:32:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {r0, 0x1}, {0xffffffffffffffff, 0x24}], 0x6, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:12 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000005487e957a0716100000000000000030003000000000000000000380000000000000000000000000020b0f9d67cfc185517f3e97049aec720f489c393bd49b5edd16b41e2df3063f9017345bf23b65514dfecc8198674c807059fa07e11082a7300162578dbcff064bfc40a46b45b7842dd1839b9e9bb86e24a8aff870dde17deff9b4bf4273de4859d4c3a6f7904f83b9c147c703cbdb0a63211319f61378a2674fe504a821020fe14cc77255f2582e2a073f7bfe9a0768d596e0e9eda649f9e64858e51404d7a8e6308d3c463eb90ba74d187b10c7eabaaacf61f9267cfed73130c12d33ff796cd9cdb6f65c19fbbd3e2e6df0a5c44685420a4a8"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:12 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/checkreqprot\x00', 0x80000000080000, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x400000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000000)={{{@in=@multicast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@remote}}, &(0x7f0000000100)=0xe8) r5 = syz_genetlink_get_family_id$fou(&(0x7f0000000580)='fou\x00') sendmsg$FOU_CMD_GET(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @local}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x26}}}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x16}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4044050) fstat(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getuid() ioctl$BLKBSZGET(r0, 0x80081270, &(0x7f0000000340)) setresuid(r4, r6, r7) getsockname$inet6(r0, &(0x7f0000000200), &(0x7f0000000280)=0x1c) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f00000002c0), &(0x7f0000000300)=0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x0) mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x20080, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@access_user='access=user'}, {@cache_mmap='cache=mmap'}, {@afid={'afid', 0x3d, 0xfffffffffffffffe}}, {@nodevmap='nodevmap'}, {@uname={'uname'}}, {@version_9p2000='version=9p2000'}], [{@uid_gt={'uid>', r4}}, {@dont_appraise='dont_appraise'}, {@fscontext={'fscontext', 0x3d, 'sysadm_u'}}, {@mask={'mask', 0x3d, '^MAY_WRITE'}}, {@euid_eq={'euid', 0x3d, r6}}, {@dont_hash='dont_hash'}]}}) sendto$rose(r0, &(0x7f00000006c0)="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", 0x1000, 0x80, &(0x7f00000016c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x1, @default}, 0x1c) 08:32:12 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x7, 0x2, 0x8001, 0x2, 0x1, {0x0, @in6={{0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}}, 0x91, 0x7, 0x1, 0x5, 0x3}}, &(0x7f0000000140)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={r2, 0x4000000000}, &(0x7f00000001c0)=0x8) r3 = eventfd2(0x0, 0x0) dup3(r3, r0, 0x0) 08:32:12 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101, 0x0) fchmodat(r0, &(0x7f00000000c0)='./file0\x00', 0x0) syz_mount_image$ceph(&(0x7f0000000100)='ceph\x00', &(0x7f0000000180)='./file0\x00', 0xff, 0x2, &(0x7f00000002c0)=[{&(0x7f00000001c0)="a6441b77d4c7811fe9a38bfa87bef71710b9402f602f020f0a612c96857e422b65a31014c5dbe94ab258ac8750406df35d1a6fe49dc1873352624ac9988bbc4258866e7d013e63a89053aba0b375fe5976a141487b73a9119738d967631ed57cbb85a182c2195f37e0753f34ba195aaf2f03615cd841a7773d371e6ca35fd0ff02cb5ed562ff759a960c53a175517beeb63a1c7c682f5a276ce431eb00c72df33d23b66b61e6f987443570be384a67024793846265def53825418168a3ba7004d662c41c4092a5db647135b81f38372d9d2f3fb1cf6e22", 0xd7, 0xe5d6}, {&(0x7f00000003c0)="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", 0x1000, 0x3f68000}], 0x20000, &(0x7f0000000300)='posix_acl_access\x00') chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 314.392170][T13849] binder_alloc: 13844: binder_alloc_buf, no vma [ 314.481903][T13849] debugfs: File '13844' in directory 'proc' already present! 08:32:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0xfffffdfd, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:12 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x210200, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000100)={r3, 0xa2, "f42a6633b1b97854dff57624df03afb8c9fae604c835bd9b98148f16b1c3180c9825a7570c26ea7ce5688e12f4cef81a521fa873a2b20b1a8c0f5da68d4fd2573f0f12910a855f0e87d9ce91d35f9d7183f26c59fb51205b24e85f21b4fb71bee8d8409253d3772b52de7cf56f7759d667e12f4064ec69f270fe1f78230e4cec4917c1257341b60560f622ecb34332300fae175bfdc4a8bcdd5703aaae01291590b7"}, &(0x7f00000001c0)=0xaa) dup3(r1, r0, 0x0) 08:32:12 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x4, 0x8000) write$FUSE_LSEEK(r0, &(0x7f00000000c0)={0x18, 0x0, 0x4}, 0x18) write$FUSE_LSEEK(r0, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x7, {0x8}}, 0x18) write$FUSE_LSEEK(r2, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000080)) accept4$alg(r2, 0x0, 0x0, 0x80000) 08:32:12 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f4545404137000000000000000000bbff4411215e3ae854cc07c9241000030003000000000000000700380000000004000000000000000020593c9adb6d486caaa309798ac25fbb3431b000db561862e66e5a2c140da19a1192e77656705b93972c8472bfb9378852bad0b8d59135045fb0986e0135f5d485f492babfad92da2d01524b2843146db4e3c69fae2d7f4e308ba6c2f18b4ae788b45cc07e1a43ed9fe7a64c6aff922dc50eeb4852923d557352c24c80cab8155b5c7d7472"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:12 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x400000000) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:12 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}, {r0, 0x1}], 0x5, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 314.788694][T13886] debugfs: File '13883' in directory 'proc' already present! 08:32:12 executing program 2: r0 = eventfd2(0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x0) [ 314.852187][ T12] binder: unexpected work type, 4, not freed [ 314.867876][T13886] debugfs: File '13883' in directory 'proc' already present! [ 314.890859][T13897] binder: BINDER_SET_CONTEXT_MGR already set 08:32:12 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r0, 0xc0106401, &(0x7f0000000100)={0xc3, &(0x7f0000000000)=""/195}) [ 314.896972][T13897] binder: 13883:13897 ioctl 40046207 0 returned -16 08:32:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x100000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:13 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 08:32:13 executing program 2: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0xfffffffffffffffe) eventfd2(0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0x80) ioctl$TIOCGSOFTCAR(r0, 0x5419, &(0x7f0000000080)) 08:32:13 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0xfffffffffffffffb, 0x8000) getsockname$unix(r0, &(0x7f0000000100), &(0x7f0000000180)=0x6e) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x0) 08:32:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0x1}], 0x4, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 315.141298][T13911] debugfs: File '13910' in directory 'proc' already present! 08:32:13 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) r1 = eventfd2(0x0, 0x801) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x2) dup3(r1, r0, 0x0) 08:32:13 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) 08:32:13 executing program 4: r0 = syz_open_dev$dmmidi(&(0x7f0000000180)='/dev/dmmidi#\x00', 0x80000001, 0x200) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0), 0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x102) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}], 0x3, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:13 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$VHOST_SET_VRING_NUM(r0, 0x4008af10, &(0x7f0000000000)) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x200000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:13 executing program 2: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x20402, 0x0) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000002c0)={0x0, 0x5}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000340)={r1, @in6={{0xa, 0x4e20, 0x9, @empty, 0xfffffffffffffff8}}, 0x8, 0x9, 0x2, 0x9, 0xa}, &(0x7f0000000400)=0x98) r2 = inotify_add_watch(r0, &(0x7f0000000440)='./file0\x00', 0x41000420) inotify_rm_watch(r0, r2) r3 = eventfd2(0x0, 0x0) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200000, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x90, r5, 0x700, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x7c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x750}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff00000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x34cc4360}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9c}]}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r6 = dup3(r3, 0xffffffffffffffff, 0x0) ioctl$KVM_IOEVENTFD(r6, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f0000000000), 0x8, r3, 0x2}) [ 315.474632][T13951] debugfs: File '13947' in directory 'proc' already present! 08:32:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}, {0xffffffffffffffff, 0x20}], 0x3, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:13 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2242, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x299007f7, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x6) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x10800, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x0, 0x81, 0x0, 0x8000000000000000, 0x5}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, [], @raw_data=[0xbec, 0x10000, 0x5, 0x80, 0x7fff, 0xb8f7, 0x9, 0x1, 0x2, 0x970a, 0x1, 0x6, 0xb80, 0x9, 0xffffffffffff7fff, 0x100000000, 0x7, 0x1ff, 0x0, 0x4, 0x7, 0xcfae, 0x604, 0x7fff, 0x8, 0x101, 0x200, 0xdc, 0x200, 0x48, 0x8, 0x7ff]}) [ 315.546455][T13951] binder_alloc: 13947: binder_alloc_buf, no vma 08:32:13 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$getflags(r0, 0x3) 08:32:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$usbmon(&(0x7f0000000180)='/dev/usbmon#\x00', 0x2, 0x10000) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000001c0)={0x0, 0xb9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000240)={r1, @in={{0x2, 0x4e23, @loopback}}, [0x9, 0xc42, 0x7, 0x6, 0x7, 0x0, 0x100000000, 0x3, 0x5, 0x7fff, 0x31c, 0x2, 0x0, 0x5, 0xffffffffffff36ca]}, &(0x7f0000000340)=0x100) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/mixer\x00', 0x80000, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000000)={0x2, 0x6}, 0x2) r4 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9, 0x100) ioctl$VHOST_SET_VRING_CALL(r3, 0x4008af21, &(0x7f0000000100)={0x1, r4}) ioctl$UI_END_FF_UPLOAD(r4, 0x406855c9, &(0x7f0000000480)={0x1, 0x6, {0x51, 0x8, 0xffffffffffff3343, {0x6, 0xfff}, {0x7, 0x7}, @rumble={0x80}}, {0x51, 0x7fffffff, 0x1, {0x7, 0x8}, {0x1, 0x8}, @period={0x5c, 0x5, 0x8, 0x2, 0x100000001, {0x3, 0x9, 0x7, 0xf9}, 0x5, &(0x7f0000000440)=[0x5, 0x5, 0x4, 0x7fffffff, 0x3ff]}}}) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000400)=@assoc_value={r2, 0xb51}, 0x8) [ 315.612541][T13951] debugfs: File '13947' in directory 'proc' already present! 08:32:13 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x3a5, 0x8f0) r2 = eventfd2(0x0, 0x0) dup3(r2, r0, 0x0) 08:32:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x300000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:13 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}, {r0, 0x190}], 0x2, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:13 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:13 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x80000, 0x0) ioctl$SIOCX25GCALLUSERDATA(r1, 0x89e4, &(0x7f0000000100)={0x1a, "785c7d66d19dbddf6a7033c52d244304a5f8390d78c262ca476e2f737925a4b7bb282db6b4714b42ef964b990c64934707ae52efa603492951bad49746974dca01055b91ee4ff5f2513631a0ad89f42a7ddc4b731a86ad73c3bb4562308b3456e8cb1bbb7e4205539ef2faaaff99f9e8b6cab760ff6ebcff120f58a22c31a665"}) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 315.891084][T13987] debugfs: File '13982' in directory 'proc' already present! 08:32:13 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000100)={0x4, 0x20, 0x3}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', 0x0}) fstat(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000280)={{{@in=@dev={0xac, 0x14, 0x14, 0x26}, @in=@broadcast, 0x4e24, 0x5, 0x4e23, 0x2, 0x2, 0x80, 0x80, 0x3a, r2, r3}, {0x7fffffff, 0xfffffffffffffffb, 0x45, 0x7, 0xffffffff, 0x8, 0x3, 0x5}, {0xfffffffffffffff9, 0x7f19, 0x7f, 0x101}, 0x7000000000000000, 0x6e6bbb, 0x2, 0x1, 0x2, 0x3}, {{@in6=@rand_addr="47e3ab5f0daa922bfd9269ba310cfd2d", 0x4d2, 0x7c}, 0x2, @in=@multicast1, 0x3505, 0x3, 0x0, 0xffffffffffffffff, 0x37, 0x8, 0x4}}, 0xe8) [ 315.994000][ T12] binder: unexpected work type, 4, not freed [ 316.000946][T13987] debugfs: File '13982' in directory 'proc' already present! [ 316.012207][T13990] binder: BINDER_SET_CONTEXT_MGR already set [ 316.018304][T13990] binder: 13982:13990 ioctl 40046207 0 returned -16 08:32:14 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0, 0x2001}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x400000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:14 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200000, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f0000000180)={0x4, 0x2, 0x4, 0x3ffffffc, {}, {0x7, 0x709914f0419e6734, 0x0, 0x2, 0x69, 0x7f, "0fb88c5a"}, 0x5e0, 0x1, @planes=&(0x7f0000000100)={0x200, 0x0, @fd=r2, 0x8}, 0x4}) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000200)) 08:32:14 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\xe1\x15\xd1\x8c \x11\x8f\f\x00\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000380000000000000000000000000020"], 0x2b) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 316.323308][T14012] debugfs: File '14011' in directory 'proc' already present! [ 316.362542][ T25] binder: unexpected work type, 4, not freed [ 316.370297][T14012] debugfs: File '14011' in directory 'proc' already present! 08:32:14 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:14 executing program 2: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0xffffffffffffffff, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x18}}}, 0x1c) sendmmsg(r1, &(0x7f0000000240), 0x3a5, 0x8f0) r2 = eventfd2(0x0, 0x0) dup3(r2, r0, 0x0) 08:32:14 executing program 1: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000040)) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/91, &(0x7f0000000100)=0x5b) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LSEEK(r1, 0x0, 0x0) 08:32:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x500000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) r0 = creat(&(0x7f0000000000)='./file0\x00', 0x20) r1 = semget(0x0, 0x1, 0x408) semctl$GETNCNT(r1, 0x3, 0xe, &(0x7f00000003c0)=""/4096) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000001c0)='./file0\x00', 0x40, 0x5, &(0x7f0000003440)=[{&(0x7f00000013c0)="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", 0x1000, 0x58bc}, {&(0x7f0000000200)="d8e84d90c45a7e557b", 0x9, 0xbe2}, {&(0x7f00000023c0)="6f005be1e70c30b2307e2373d5da190496326e4bbfbf066a0f6b26d5df82679af57b2782aaaace7463dab810cb5e49c766259aa1b4032336fa95a687f4c79cfb259d28ccc7f523ead7c9cc58f1cc27ceb3a90ec9e9c8b824c0ee9ef495a701d03dd685796b73f830120f22c8e0433110628bd47c31bce79d732d7e3836645bac21a48304aeeaf15ecdbfc5619fcb4fae0d7a64e67ce4cb9d252edd0f21d39c3b644bdcab7463b8278c4b0bffb78d7b724a31ced4b53dcdba18f7aa4a848f66d99180ddb387efcb1f5cdf7b75c041d29f7ceff85405e72f0f7e0ae18b8530a4941c130ad505e1de52a07e5aa7121ff3fbfdb6bc2cdf37aba4fc0d6c9d6bb97d92ed9d98038dd358c889c0c10b1c4c8c5746587115fa52da70f027ac6e16abc5713e953a0065ba2842840eeaf13975c5411b341fd099c044beb1b240e4728fdc91cff7531535ba1b9cb67161f5f5e848b13040d084a559a1ece8c790be89e83681b27ae99f66dce1e9f5956abf6d73b4823dc6e5f016dfeac65444bda8ab83cf422b9945729c1fe2c4528532b4b67dfc691c4162aceb19ec26c6fc421f037241d5bd0413edc01725eb0948e3cd8d7478786411ea572f74a30af26aa489a437863a680798a225664cbf5644d54c110d4865069266f826f462ec5caa354a7b9393c9e6d96623900ccab10c2b64ac062309abd03e03fce93488744e23b8f57d7c7374adb0ad226f23a3fccf6fdd9d3ad00fd769c15f88dd10dc11a542fedba2b5e7c00136076f4e892dcd29507e30ecfd20b809b22151c51a7710b349b4a8b51c0f38b5bbfddd1b7692803450a949bc5bdc6c562975a99115076dab0250c0366025b7b28b21b891d60cd16a0b3b6599a2ecccb420c5a85f6c47f0541b6b4a42d40eaafd65498f9ae5534da10c548907f44a3668c63afa75bf55dc59f80c267c52782206440d2aa20f03c3f0925533ec2b40f57ecccefcb6793be6daa73c78748f45b54ee98a56cb28a5b619153385ccd547e8c53d84ca5e0c04bfedd47c0cb16dba69098a9615e317532fab220bd516ca42a1434bc0e3085caaefe0e93b8680a35f6ef6adea785fa15b15c05a226f82f9eebea57b85635f3cddbcf379b9612da1a9a0584775e777a92f38f120b8be1c755563aff98b0c567e99acd80bdb036191913dcc13872733a46c178e0ef1c7c7a9170cee71e7dd14c71a8e8ea0ed14033aeeca0aee2d037ce9de912e6c0d6d0dc3b86c1023a11b0a6b46fcf9167a52115f142a61ee212a6387aeccff3e0da4bf071529de1d35e250dfa30500e1f1c718e3861a2dbbdc70b5905b0c4ebbed020fc504a962d7c9b38443fbec8b8051de1c22adf26f686c34d99762307c4467a9ec2911837b34daa135b6eff9fad7bede099b1873810baf20ea41d056441f893289add6d6aa6c37822ecf3d192cee410f4757a000a5563980fa2d48b437c3b7c8fbf81bc37fe1041aec03ab4e8065e3c6a6083357c53e1daacaacfc3400c9c6cb6f7506b032bf409bdbda958ce2266b3352b03e3b3d161d1b19202fa5d73cb7e1276b3c617cd00f715bbc18bb3a46036f443a1ec4bd9c945700b7c3e9fd6b3e28e41311588c69760b1358fb83d42c47b023f483b9a31792efa437396f4c7847674f32181ddd833fe645db976215b4e7c3c0ce3fcbe5dcfa5058e25fd755a92bad23f550dc43a3656e85bcfd060e9f7c2462347db635838f5a89901565f8c7e6eb8009ef61123511cba02088b74ce78eaa7efbd40fe8c4c37586890390064f61c5d354d2803abc0524df401d2a4f5145058501cfdd1bb897d99131932eac81222d3b874c1fcc7353effa3514225c743b2c5740ad6aad0a37d04292b9c563b3ebb09beef1f9944a097cb6ce6be9087cd5773929df0f3bc9d424b22e0940aeeefb81fe94518287fdf92578c410108f13c3378586d9330f66486e12b7d1d8165db5856832f8c44042fff494de74b763b7cd6bc98eb36aa00150eeb44391eca48ceb6425785733b22e24e86e3de3117a287ba8f8e06fe53065ab738ab1f32570077bae6dd7db2e3ccdb90e187370ee7842be2fe711c05aca71a6e157634e2b731c0d89e71aa08dd9d69f99c5d08d0e7c7219f84b9433514f335f75524fec88f65a8b4eb19425b32c1ea71454298e0472f71679a9596e003c162cbab53b4c6ce53c5355cb89ab31b4e46b1b1c8c1d1faffd5f3e50e87abc8738a82c875c669066c31e285669c4299e87ab6d86328cb49d2192f44cb4627205446bf3bd8725b00891af5e240f008a7c734b02f4f047362ff0fe43d99e94f7d9c07ef453c07847d346dcbe30a04a591413813572be05513efa235c8e9b8abe035eedc9a0901274812a823ce0cf3ee529e09c2cc849d074130fc03e1464b4954ad04a3e099ee3bb4e320aa3133542ebb53fd6072fa36d2e6c7476bfe98b9c98cad124bac6db5c6e59b66aa342f9694cc4417cba3a53e72258bacd307d6ad343a56bc644d1ff40da86c3d9692a64b110d48f19a451eab1023cdd1d4c1cf15f0a8f276ffff6b401e4ae9ea5396ff935b2a4a184b277b2425b0c6161b689483fe0b5433ef5ab32f215e695e9e0473f4a8cf19903494c0f14b378f56d9c232a79aced62fd32f78ac29203fee665481e349c2f0a694b34dbb174024e973460f4ed1b42144cdd34871ef3b7511d39ca26bd616a2caf792a68e3d4bc0f7233fede0af7644ce4c4c72c84680529aabf4b7f951f090cdaa3980c791af056a1bb66c0df7aaffe044f5ad28a7e620f91bfd365e73b9344f6c20219ae72ce126a8f2aed685152feaee9bf007c838b22f9def2e250dcdbc9c5b8983a93c02526213331f664094d142f30fecb408caf441ff3a9d59e8672c9543482b511bb02026cd2499949e2768002a45644102209b88c8a24f71f9cd74936877267a279266cce8d4b2f5400234b83dc16c5deb57819ea49d12ad618b755dd04c539406e88008d35747b909ac0510e569839970a0d03431f3048dda6ca9476515c868e358a197890beb71e71b35bc51e86804896b156a362bd0c26a200ad2f696a51a7cdf116906e2145e24599135837d690f84a98da37c99dc307a97f10b96af653e0218a971df673adf19a647400972abebc82aba0b5c6cb674a5cedfa00f93fa208b96f60526b5d685cc0fc11384a837b6181b9aad09b3074467d65d43321a7c452ba7daf7e87797da1533ac8936649aaaf15eaa863020370dc8deaea40f879ce40539b6f8333575e6ae857bc085dd3657160ee0da580088c85fe224c883247c4737c967f787516c090ea6dfb03fc63cfd5fb30910f1087b57b19429f05bd30fee73770454a68b4a56e7b847d99ae040613c7326269b899268c6529daf65f404a3cd4e72a50601190526dcd3a946d055d6a3dd33053e78af369c212380e3dd1c9dc54f8130c2daafceddbe53fa2db9b5c678e63dbf6d8ad6cd1d4df9d5ca546ea43703f06765af3176ff50b7c42b1f4b9e6e31f71fc6615a84a21a5cdc03472dc33bed042d416bab9838c703ad835815e96bf0b8d9a1c911bc9c7edac8a62b266501d902bdecf793a6cabc94998fb4d2b2d57e3286fca070f9daa60156b2b72c3c5a06c8c64cac2e2ea8b8bef399bca044da3622d2e56993f99fd2c4d7f0b7781d83f72589ccf6d70ded8fcd0354732c347ff9e905e6a57679c6bb333b49c37f690fa2151c54107ebbfc92d72cf0489708a967b8f39f43d522ce045d8b21b6415c216ca9e34b352e20902e52c7e4ca4506d468c73b57458312c29b703c107d4a7d790a9a2bd9f16def48c0d96152402af7f546ee35cdd578115a431c3436814dccbef8ef1106b543d069225edf3f5dedef451748326a7a2d1bd3a8a82ce9e3783ee71fd9701ba1d3419fd7c6aeb46b5ba73e41473a59222e15b833a9fa44287282c87d69bfbbc61746163db45e360f3aab0e9f7c7f47c9280e4ebbb83b48e4f2d4db7ee011fe278f8a9011f60ac96ea2e457040215230310c3fd8868ce8793dd2bdbc04b4988cbff6ff950f65970286d80291ea42f3cc44b4ed43ac30f1dc0c857dc5ae1d18d7e8f8bad7334799fe47e60c7aa38554c8b2e379a9b46e6a49d3cac42606fec39052a83a839c4d368581d575b023701e3c3fd7e12b4f6d5ec61017cc03c504e9cc34e81b9a25bb0024d7a9a30722b9b3445492f8362c13544522eae6ef9ab94b1082c6fc9922ca72476f28a4fd52f8a9aa92e0a2306c1b4d34401bb3dc7bc4e43738f53e8b741eefd3fca1c0c2a1507e8bae86f62c358ba7bc10910f6bf821a14f8e0fbd41c3dd7b409eeeb68f63cc74a8283348400137eb2a4b371bf0f06e22e8930275f068fd34a94736106c29eb68348bc2194ecedf941f731ded16b314380de9b599af125ec169d7d491c8499ed12aa889beec429ac74a69d7f693bdc9116c07b05fb78d442b3f0839dc61ed1de71fe785a31aec9f730bc10c877807074f16ab9d6e0599ee0a344d206d265335555cd0eca667d11c58ad075915e809c0408cad1eb0defb84b5918958176b94236f4033d154cfcdda57381b67a4c559e7fbba2f135b26a8fc18ddb6ad81627fd3ad8963aea74172d5e5d65d313e6f9c86abfb8d9be3885deb68f284ad61405031383c68651ff58e3526c37bd3326a645eef956aa31304c24aafaa6c8fe67d4f54fff8d0a4b4ee0406458f1c69de45817438c8e62fc66e2ef52cca083f8890741616c5b9513c0072369c6b2d35a70d042aa68568a5bf96b9b9264adae602018a58a75bee4538d34fb6a04892035b6764445a339f0aec993225fbbbf41ac0ee5bb246a3edec9c1b3a41d37b6c55f1cb630d0060189086c27b99365d3a077dc79a59378123ea75f591816748060bdd71dbecc21452d082b5cc691edf860aeaff2afc8d84409b615d0eed61c117071ec588acfb5839eea8881667d99e1f27e2484aaeafad9da8bd0f941245eba87ad38761426400319e32438fa95a67abd3e262dfbbc3ebd36ec632f6bbb1790a51b1274439fd6d2584ff44b08f5afd6d1fdb542417a3442762d940181690d294527f80379a6581bfcd3ed6b8774eb5b7c167303e2a1ecaa9895f32897c296ce5bc1c0454584e4ebaf8dcb11e620a980deef8485e83b6550c5fd1f522617636dbe951fa232ba8366bab86fbb0caf63f374993bf34d8ed8367e84beed01d4f46f2100ab05d7d9ad9a563dc04196eea1ab17dc21ab7cb418c2231df55a210b9a97a271d30dcd2662136bc99885353eb3f1c97d4270fad176a9d11bdc45094b388b67d9da8c93c699434a052efa23a2d6afbf3680ce370cbe2dddc09952889729aaba69fe94f9ac55b4a0cad56fe9f46930c15a127bdb69f34ecd8050360e75761c0c0bbeb221f477109844cc2b7ac4d3bd121bc454bb47a313e7953cd1f08c7756512e4353c1fd2d3578388813c30f4468016b5fe53e424c830660fb1ab9e4dabe6f63003b7ea26ab658d12bc1ef26eae1946fc6c368d94b7b4d9ed6be74525866c3f585da74e1820f820649440d20ce2c6c167a14f222479da1f998b02f65913a9168f14336ca1d3b22d5679e3fce758867aa07ec77343542ae2634e3bb5da1850588bc6455d51a931e2c8990fc85a938f7c29a789832d55666f90e83ff49c7e4378ff386c6ae0b6748aaaefe94b4fa8a2776bf95a10e05780d0bb8d3175b699bfecbfcc19e4d1e373649f842f5ee7aca2286e3943871be846c0013fd866e74c9ee9867d147fcbf2046f8dd26d7ec6dd6cabc0e5e8afa3880c6be15bb0186d6442f0e745f1460db31fe7026a", 0x1000, 0x3ff}, {&(0x7f0000000240)="eccd6f7c15931d94821b9cc1539e1641b8e5566663aa9e5a0605f87ec95810bf7ad5f9192cbf0878d06b79ffcb6d41a633fbba3bb41e9efa414293a548947d754a924083d1607caad0a4a13545419e3bb4a4e34718f5520251ab11d51046cd3f51374a5d1160e0f60c69cd14a27ff5d715c2fd4c079482b1454ee70648a1e949fbb25d0902d7eafb85ff357de1774cd332b99801ed6b40b23533d4c7d637331159ed489ebf787a0d399142b8ad28c877f4e986ba5dd5d4fc1c8f6717820776975a70f31553b94294e80861d4c0594a0caaa851a5df485493c4a503e47311962a2be968", 0xe3, 0x401}, {&(0x7f00000033c0)="09538a225144d8285f5a8496dd826858abfccab6bd29eb90297d2af4a893528d3c31aac9a847187c2a6b91bcdb1527b2627b5bcde1ecd22e6c660a85b168c6b93ab47b2f06ecdf7d66ee77b4c60b3d9abc10b8f6216539338f813e", 0x5b, 0x1}], 0x0, &(0x7f0000000340)='\x00') ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f00000000c0)) open_tree(r0, &(0x7f0000000100)='.\x00', 0x100) chmod(&(0x7f0000000180)='./file0\x00', 0x0) 08:32:14 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:14 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000600)={0x8, 0x0, [{0x0, 0x40, &(0x7f0000000080)=""/64}, {0x5000, 0xf5, &(0x7f0000000100)=""/245}, {0x3000, 0x66, &(0x7f0000000200)=""/102}, {0x10001, 0x73, &(0x7f0000000300)=""/115}, {0x5000, 0xe, &(0x7f0000000280)=""/14}, {0x0, 0x8e, &(0x7f0000000380)=""/142}, {0x2000, 0x8e, &(0x7f0000000440)=""/142}, {0x5000, 0xd1, &(0x7f0000000500)=""/209}]}) r1 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000740), 0x4) [ 316.784734][T14043] debugfs: File '14038' in directory 'proc' already present! 08:32:14 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:14 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x6, 0x3, &(0x7f0000000300)=[{&(0x7f0000000180)="fc92080614feb765fc9dd76fce7fd265ba8313100fb5836bcc77d73a727cc7d7cbbb275ea54837621caa7e6d9718bd0768c5f7e482c66ef7ab94b89a786d370c49dcea56eb6aa0b22d9f75f4395b77f5", 0x50, 0x4}, {&(0x7f0000000100)="ba4914681dac118ad734dfc0a2494dd4e804a1d6deecc80bee7b98defd68e3ce3aff0fc035c887493042e87be3ab7d000ae15ef3aeb11d29b7c9a9f4", 0x3c, 0x47}, {&(0x7f0000000200)="ed8bf94d774255187716ae87a09d4f30adac89db55367afb767432e4918dd87d6944f7a427b41138df8fda98d3f141bc3fd4894c8fd471791f9c2bd38ff84a5fc29e90222b4d2d810202ff03d5852135fab7374da954f000b860bc6ab79afe5629e81ec83cd8785501854d69b6e437f4f424a8f6487b5b6016d3798d5e16c99777474f3ddeba4e8151b6e97e25072bf5d86cbe0a6a7103bcdc1a93caa29f7cdeea41e861a89d0b3983be7b12daf3adaeed7bbee21e1fed31232abcd7fd8ab1d6d53068e1c2a6ba3c4e0305ffb7951cfd9f5d56d9be3a28618b924886460ea4aec9e74e0b", 0xe4, 0x7f}], 0x200400, &(0x7f00000003c0)={[{@grpjquota_path={'grpjquota'}}], [{@smackfshat={'smackfshat', 0x3d, 'tmpfs\x00'}}]}) [ 316.844179][T14043] debugfs: File '14038' in directory 'proc' already present! 08:32:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x600000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:14 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040), 0x0, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:15 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/nfsfs\x00') ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000100)={0x2, 0x2, 0x800, 0x101, [], [], [], 0x80, 0x7fffffff, 0x7fff, 0x1, "5485962228b7ea40b04d30c16d292876"}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:15 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2001}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) [ 317.070876][T14071] debugfs: File '14064' in directory 'proc' already present! [ 317.127819][T14071] binder_alloc: 14064: binder_alloc_buf, no vma [ 317.202091][T14071] debugfs: File '14064' in directory 'proc' already present! 08:32:15 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x7) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x700000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:15 executing program 4: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) bind$isdn_base(r0, &(0x7f0000000240)={0x22, 0x3b2, 0x0, 0x1, 0x4}, 0x6) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x1, 0x2) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f00000003c0)={0x29c, r2, 0xa00, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe9}]}, @TIPC_NLA_NET={0x70, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x280000000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7e68}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000000000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x3}]}, @TIPC_NLA_BEARER={0x108, 0x1, [@TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x7, @mcast1, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x8, @rand_addr="e698cea9c3f56431c47c3bc686efb6d1", 0x8}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'caif0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x6, @mcast2, 0x8000}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x22}}}}}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'ib', 0x3a, 'nr0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_NET={0x28, 0x7, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x80000001}]}, @TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_NAME={0x8, 0x1, @l2={'ib', 0x3a, '\x00'}}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x44, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffffffffffff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}]}, @TIPC_NLA_NET={0x30, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x20}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7ff}]}, @TIPC_NLA_SOCK={0x20, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffffffff}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7}]}]}, 0x29c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4005) 08:32:15 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_LSEEK(r3, 0x0, 0x0) 08:32:15 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2001}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:15 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1000, 0x400000) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x1, 0x39b, [@link_local]}) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000240)) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000100)={'filter\x00', 0xc4, "b4d6d0c9d77f28708afc9a7585f4923f66113e81b0745acada7bc9e19642bc00d6d0734f8c3fc8078451fd6f7109681b54031d84fb905f1c6166bd23e8a61414b7efca77a2492b59a880e808a9374075641b7e41a08bc59a712cd02b7bb1379d438ac855ea577c418c9c52f36e0729e3df02d18944852339990b726afb0f3550c4677bcd9475596f43480666339e9827e0694d30b95cb91df4134943504841d81debafb8a703a53910f5ec54214041e88245cb9f26e859ae9aa67d25ea96fca99e5f0021"}, &(0x7f0000000200)=0xe8) syz_open_dev$media(&(0x7f0000000280)='/dev/media#\x00', 0x0, 0x40) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) socket$can_raw(0x1d, 0x3, 0x1) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 317.626875][T14098] debugfs: File '14090' in directory 'proc' already present! 08:32:15 executing program 0: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{0xffffffffffffffff, 0x2001}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:15 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) ioctl$VIDIOC_G_AUDIO(r0, 0x80345621, &(0x7f00000000c0)) [ 317.702081][T14098] debugfs: File '14090' in directory 'proc' already present! 08:32:15 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x7) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 317.790853][T14109] binder_alloc: 14090: binder_alloc_buf, no vma 08:32:15 executing program 5: r0 = memfd_create(&(0x7f0000000080)=',lo\x00', 0x2) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:15 executing program 1: r0 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x0) accept$nfc_llcp(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x60) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_LSEEK(r1, 0x0, 0xa64969bae3b4b61e) 08:32:15 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f0000000180), 0x8) 08:32:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x1200000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:16 executing program 4: bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x10) prctl$PR_GET_DUMPABLE(0x3) mkdir(&(0x7f0000000140)='.\x00', 0x400000) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000100)='tmpfs\x00', 0x1, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x800, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80400}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="2800001530000c022bbdf995f7c5df4c0f1da4bb7bce500b12f366583c2500000000", @ANYRES32=r1, @ANYBLOB="10510000200801000800110002000000"], 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:16 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, &(0x7f0000000180), 0x8) 08:32:16 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x7) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 318.091866][T14132] debugfs: File '14131' in directory 'proc' already present! 08:32:16 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0x446, 0x7, 0x7, 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x8, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x80) [ 318.157667][T14132] binder_alloc: 14131: binder_alloc_buf, no vma 08:32:16 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0x7) 08:32:16 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = accept4(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) r3 = geteuid() setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000100)={{{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4e24, 0xffffffffffffff44, 0x4e24, 0x2, 0xa, 0x20, 0xa0, 0x33, r2, r3}, {0xfffffffffffffc00, 0x3, 0x6882, 0x5, 0x4, 0x10001, 0x5, 0x5}, {0x3ff, 0xc933, 0x7, 0x80000000}, 0x8, 0x6e6bc0, 0x0, 0x1, 0x3, 0x3}, {{@in6=@mcast2, 0x4d4, 0x3b}, 0x2, @in6=@dev={0xfe, 0x80, [], 0x21}, 0x3506, 0x3, 0x0, 0x9, 0x2, 0x2c, 0x200}}, 0xe8) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 318.225870][T14132] debugfs: File '14131' in directory 'proc' already present! 08:32:16 executing program 4: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x10) ioctl$VT_RELDISP(r2, 0x5605) 08:32:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x3f00000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:16 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r2, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz0\x00'}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000540)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10008800}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x0, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) unlink(&(0x7f0000000280)='./file0\x00') 08:32:16 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) 08:32:16 executing program 4: mkdir(&(0x7f0000000100)='./file0\x00', 0x80) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 318.549664][T14167] debugfs: File '14164' in directory 'proc' already present! 08:32:16 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x125000, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000300)={0x0, 0x7ff, 0x401, 0x7, 0x97, 0x8, 0x81, 0x5e6, {0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x20, 0x3, 0x6, 0xdc, 0x81}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000005c0)={0x0, @in6={{0xa, 0x4e22, 0x1ff, @remote, 0x5}}, 0x10001, 0x7fff}, &(0x7f0000000680)=0x90) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000006c0)={0x0, 0x101, 0x0, 0x16, 0x6}, &(0x7f0000000700)=0x18) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000002000)={0x0, 0x1000, "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"}, &(0x7f0000003040)=0x1008) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000003780)={r5, 0x401, 0x4, [0x0, 0x7fff, 0x80000000, 0x5]}, &(0x7f0000003b80)=0x10) getsockopt$inet_sctp_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000003080)=@assoc_id=0x0, &(0x7f00000030c0)=0x4) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000003100)=@assoc_value={0x0}, &(0x7f0000003140)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000003380)={0x6, 0x8, 0x4, 0x1f, 0x0}, &(0x7f00000033c0)=0x10) sendmmsg$inet_sctp(r1, &(0x7f0000003a40)=[{&(0x7f0000000080)=@in6={0xa, 0x4e21, 0x80, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x7ff}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000100)="b40a6bccf00c8c32ec5360339bcaabc52f3b52f55e651368bc441e975846dfa7c9bf9e89812bf3007c4919c408f52b58607b6a830985b47de46cbeb36cfb5b8061ca011afaa84aa51bc38b", 0x4b}, {&(0x7f0000000180)="8dd3687922f15a43423b999126c9ae46efd3e37a2fc34f2bc6767e5f9a9c35a4fb3d85fa11186074c97f424902c60f835f5357f00b74ec90b1b825fdea57fc6ea142836ec27464eb90aca00aa7f03b085550c47b70616fc4b7ede38700ea645e3d638768dadb6cfd1e1b961519d3704f3bc2a084db2c2364fe29369cc00698c8c324003a58fc6302fcdf69c20a30836f281b", 0x92}], 0x2, &(0x7f00000003c0)=[@dstaddrv4={0x18, 0x84, 0x7, @local}, @sndrcv={0x30, 0x84, 0x1, {0x5, 0x6, 0x9, 0xfffffffeffffffff, 0xb1a1, 0x800, 0x7fff, 0x6, r2}}], 0x48, 0x1}, {&(0x7f0000000440)=@in={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000580)=[{&(0x7f0000000480)="70a284892ef51433f3b82e60ec69a854f802cc992af161d0f18195c6342d5b00fe99d1ac7b7513dc9a2fc363205a50cdbd183c749d806e469f4dbf5e027532e3ae01671153ef735deaf6f785bc25348656d97ea34253b90bf0fef25978ede8baadd8c0569560e99ea6e186998725403c34c4db1608be1d04603dd6e335980c4bac2bd7ece3d5fcf4bb68cf3e95bfdc405f9ca7876a61838bbd3917077e8a63a35065ffac6b996288f89e345db663b4703ef13731826a58d165cb7880f3019c0aaf82426a80a85f16e37c039fd1", 0xcd}], 0x1, &(0x7f0000000740)=[@dstaddrv4={0x18, 0x84, 0x7, @empty}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @init={0x18, 0x84, 0x0, {0x401, 0x8, 0xd0, 0x147}}, @sndrcv={0x30, 0x84, 0x1, {0x80, 0x7, 0x0, 0x10001, 0x401, 0x3, 0x1000, 0x3, r3}}, @init={0x18, 0x84, 0x0, {0x4, 0x4, 0xe2, 0x8}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x4}}, @dstaddrv6={0x20, 0x84, 0x8, @local}, @sndinfo={0x20, 0x84, 0x2, {0x7ff, 0x8000, 0x4, 0x1ff, r4}}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x110, 0x8000}, {&(0x7f0000000880)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10, &(0x7f0000001f40)=[{&(0x7f00000008c0)="7e4c8261c32049934f19fd654f7e0b4ac2adb7275821828c829ba6300a8de2cbf6edf6f5fb93dda45a09acc55328ab798f921ecd5fba97d2c02b672d7e7f4d4c35f8dd3edd58ecf658c61e763d015532bec2ffc8e46d67e85a168995e4b53b0ef54bfbcebab670ff2ebd8f2f56291897f97feda955a0fbea894d3ac9e6715e74df3f423f0e06e9e898d369127020c82c00447620eec65faa06fce60359988e10b2de6f837663fc44af54ab813223350a4280e33cedd519a1cff078eeedc70181e6", 0xc1}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f00000019c0)="7bdfb751eafb3c2515a4f6b6111acbb83413b7a8ba8e167aed401ad31b043185b2fb0c518b65b6abba9235e64cae3d9de8b6740419635ff1ec2ec70cf32c8423b09b8fadeec9cbe83b89da77329af2dfd51b1c4320f8005ab925576bd24ad3269009cf5ef6d1332e4cceda39261a8c62d79b0a462bc2166b10225b9020dedc80431516bdb702d00f7d93811f0447617d123f3bfafabd630bc1f4f1710ceffcd0ea1d18cb9d4a1a2745cb4867e0c8d7034ac79f5a7ef2f07743e441c2f972d92de5533c32a2fc", 0xc6}, {&(0x7f0000001ac0)="4fa3ac6065ab81b0e9fc54bee0bbf018d655da2b24bde045efaa5cf425610704e32c4616f871318b80fc384b011008cc012afa6f7e0444f697d77dec17e4e07263ce3575db2eb126b98df1590c8823505e73a20553ac9638b52e8d6a0658fff6c6569bbf94218869e8c729f4c6ca7a81c8bd544f76b3b24a437dcf6373e89d720c58cd0eec3237a9e6e32e4bc96b69e9591381a71ceafa7bc8fd81f90ea3ee764d1e4cd3e562e719d275346b", 0xac}, {&(0x7f0000001b80)="19e3630d465c622f792cb7ec4f6c61056998034cf887497e7a03d5fe3525e87809cdf623b85bc6362354d075e0d3dc19bbb12e8e4b4b2244e71e76487406a9f5f5279e66d48088ea07a394499c65be27fe732d91390ded18fe0ec44fcdfd7527bd6d4f21", 0x64}, {&(0x7f0000001c00)="20b2d392a80a5eded2955eb1292ad21fe885a674a0dd6aef41780179", 0x1c}, {&(0x7f0000001c40)="0bcd5d93c7c716385a200b48f5b3de09a357bfc96bd5301aedb76b3efde99faf977b7df471c740945493d34dd7ab577526c94223c5bfed11a628f3cd0e29847fe109c17d66ba5fc6873fff272bf75e071fbeba6f8833f841d5f7bd2025baafecb2ae176037cd2987ef800edf0f249b72d51f0e3271b70f1089902f90203a50046a14e325230199224a82", 0x8a}, {&(0x7f0000001d00)="afbc84fa4ae5ed31d150af5d4e3331a5f7797cabfa1a0ab1c3c7010d2402e44529bdaa3a9b523f98f16de12d953e121d01d81e72b24db67d6c1aa734f5c4cf61c58060e3608512e9c00cb3d1ce4a5a044d70168d302d14cc7c529e0cf3bb3e8c536904192e5fedcd8c656d69a0c786d0be1926a20a069d7211ebf792350dc0685947098d5694fcee45b907b09d044c0aef25b83689aafcfb0ed1d2c99a060feb5d4f4a3047647a482fa7fc856d6a292802cf15556bb8ed80bae44f19aa0c1f132522f6b16c89bdb6b2", 0xc9}, {&(0x7f0000001e00)="544129229b75634c165591ed744adc22485b8c569b96dd9dd868a45291dab2aa40df8182157848090ed43dc0dbbe680f7f56862ce0ce728cd3fdab4f18c8649dcc4bb4a318266f36458e62bd9444394cd05a8bfeb3e3abb455e0fd38fd8d336af77e1565ec46a8a5b5644fc1910010cfa3e25d5ef0e63a068b85c3ebe90ce10c4ed827dda721e38f5d8c3dfe392c6eb93a674ea7fcd5b9950834021301a13a1716c1b26145af2f3a3d833062ae6042862451f6141b093b6a89297ce6e61794ed885cac263ddacff394f928468bab77", 0xcf}, {&(0x7f0000001f00)="31de44fc13d035976f4bc90b47fa8707", 0x10}], 0xa, &(0x7f0000003180)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x2}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x1ff}}, @dstaddrv6={0x20, 0x84, 0x8, @dev={0xfe, 0x80, [], 0xe}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x2, 0x200, 0x0, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0xa, 0x1, 0x5, r6}}, @dstaddrv4={0x18, 0x84, 0x7, @dev={0xac, 0x14, 0x14, 0x29}}, @init={0x18, 0x84, 0x0, {0x401, 0xff, 0x7, 0x6}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x200, 0x8, 0xfffffffffffffff9, r7}}], 0xe0, 0x8001}, {&(0x7f0000003280)=@in6={0xa, 0x4e21, 0x1ff, @mcast1, 0x1}, 0x1c, &(0x7f0000003340)=[{&(0x7f00000032c0)="896b0637b408d9013509d7ab2256e5033b24d4625426e435b26b2ceaa74860b5cef4ae5dc7c47e8287d23726a08dcb43842930e7b99f1f5273a8e7274594ff9ce4675a4ac7876668c191737ab369c50103be39fef89f154796ed659367c316a0f6b7e6a4a89946d2daab", 0x6a}], 0x1, &(0x7f0000003400)=[@sndrcv={0x30, 0x84, 0x1, {0xfff, 0x7ff, 0x3, 0x6, 0x9, 0x1, 0x2, 0x7f, r8}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x5}}, @init={0x18, 0x84, 0x0, {0x0, 0x6, 0x7, 0x40}}], 0x60, 0x40}, {&(0x7f0000003480)=@in={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000003980)=[{&(0x7f00000034c0)="4061fd2f2ad5e600f742f7264ee707bf6b54669c4e4bc220f87d3c52df7684b00306503d2167b11470357ef00d006a2f5a92cbb36112b3a5fa75aba55b603509300490aaac5ea76b88fb680c1a603afb3ae748369efd8493487ee9a41b32cf2da1544265476ce771055f0299cbf2d2d055", 0x71}, {&(0x7f0000003540)="91f1d6049f677e4eaede6751fba54eedbb4fb202b139a2b5f535d05520f1848f9178d1f17d8acb28d1d8a1fb441ed73eec8fb0be1559e846d659b5536583042ad14cfb8b894b6f52a9150c5c4509f3e32a758976cad1d0185afe9e007741caf3ae77a03261b82da140b58e8107a6a8fa860c6cd02ad7081db7d4236739e06b6d3055248d1a0686b9684d3453428635ee84dbf7361a4b0000c7d92288bd29dca22a210ddecfd0f6107cd74009594f001f78afddacf317e0b7c0094297d9e451542fe6e612104e13d74065c66c0cf62b07049264c283a68dce9536f6857c79ae", 0xdf}, {&(0x7f0000003640)="1d4c32093bb5beed0629d1168d254b2217690d3f081ded07d9fae1fcb92ca9c00440796fe96da003a6dba957d938b73c132ce9a3a3a22210338d353057ba", 0x3e}, {&(0x7f0000003680)="fa636607976352fc94d3a27856c6b8195ebcc00ff559b991411a9691802614d444beb13d50a021213cbacd44959e4c0065518b4e2e8ba70eab718ca0e048bddc4c8c6ac888fefea638474a1c76a0d99f0ece20b12c87ff56e844f099ed293f4e4cae8570cf2ac4e5aff6ee8f10b2ed9f7e354e86c3d17d3680a6751e1c5c7684a02e2f0ef3a0de82c61c0d8740c04693833666dd3e03e33cec1d96f021e0b26d821fefc665b5ae7fedef94d5ba632c227b17f5c9da2eb988e3dbbb22886765074012deb4df1658a736e779a8d974813f148f2a2f899cc5ac717d38b2dc700e430fe64a92e79471b8dc003239da935ad47575f75ff76e", 0xf6}, {&(0x7f0000003780)}, {&(0x7f00000037c0)="3a4a6ae10da19548ff03", 0xa}, {&(0x7f0000003800)="92c5da0418c1107ef6cb7321f79e4e377c1bd916544b4c62dca6652a2729e632955cfcd9ec0d86daa4c04b094273f277dfeaadd68674519fcdd0d9fc0cf2f90950c07a5b30fbbf8e852f20bdbece53c729cbdaaeef71ca1c989a49820429fa9a071c2f", 0x63}, {&(0x7f0000003880)="fe63a597cb4728e0184b32fa18615cad7928c9a4a02fd9ddd97b8999594892e5ec4e71fe4768f23edefa08e70135b86178f43c64081df391654393c691762e4c82975a280c7d3ad915b8ce5b02060f87ba3d819dae3227630dca6910a9a7645f9b218c13df7bb839e16560c41bd2fb81600fe4863aab61ddce06c07e572b8c4eba3727c70153f1d60991c1528668c1796ce5c388ce9f5c34773ff7997d0ecdaf2d65b42f63de35fadd96dc40647642350d43883181310ffdc7204e0a4025396bb45aa2e5c452320123c82e4e88a599f14dff498e2eeb0de94e", 0xd9}], 0x8, &(0x7f0000003a00)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18, 0x4000000}], 0x5, 0x4000) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$FUSE_LSEEK(0xffffffffffffffff, 0x0, 0x861b474e) [ 318.605744][T14167] binder_alloc: 14164: binder_alloc_buf, no vma [ 318.668262][T14167] debugfs: File '14164' in directory 'proc' already present! 08:32:17 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, &(0x7f0000000180), 0x8) 08:32:17 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) 08:32:17 executing program 1: r0 = accept(0xffffffffffffffff, &(0x7f0000000000)=@caif=@dbg, &(0x7f0000000080)=0x80) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f00000000c0)=0x152, 0x4) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000100)={0x8, 0x3, 0xa, 0x1, 0x2, 0x2, 0x3, 0xb1, 0x1}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x6d) write$FUSE_LSEEK(r1, 0x0, 0x0) 08:32:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) membarrier(0x40, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x4000000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:17 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f450000000000030003000000000000000000380000000000000000000000000020000000000000000000"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dlm_plock\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x200000, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000080)='attr/fscreate\x00') getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=0x0, &(0x7f00000001c0)=0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000200)={r4, 0x3}, &(0x7f0000000240)=0x8) ioctl$sock_SIOCOUTQNSD(r3, 0x894b, &(0x7f0000000280)) [ 319.045159][T14198] debugfs: File '14192' in directory 'proc' already present! [ 319.082811][ T25] binder: unexpected work type, 4, not freed [ 319.091183][T14198] debugfs: File '14192' in directory 'proc' already present! 08:32:17 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) [ 319.123008][ T12] binder: unexpected work type, 4, not freed 08:32:17 executing program 1: openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80001, 0x0) r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x100, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f00000000c0)={'filter\x00\x00\f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00', 0x2, [{}, {}]}, 0x48) r1 = getuid() getgroups(0x9, &(0x7f00000001c0)=[0xffffffffffffffff, 0x0, 0x0, 0xee01, 0x0, 0xee01, 0xee01, 0x0, 0xee00]) lchown(&(0x7f0000000180)='./file0\x00', r1, r2) 08:32:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0xfdfdffff00000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:17 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000000c0)={r1, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}}}, &(0x7f0000000180)=0x84) [ 319.347070][T14224] debugfs: File '14221' in directory 'proc' already present! 08:32:17 executing program 5: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x0, 0x0) execveat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='-trusted*/cpuset\x00', &(0x7f00000001c0)='\x00'], &(0x7f0000000480)=[&(0x7f0000000240)='#/nodev\x82bdev\x00', &(0x7f0000000280)='\x00', &(0x7f0000000300)='.\x00', &(0x7f0000000340)='wlan0vboxnet0selfcpuset\x00', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='\x00', &(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00'], 0x400) r1 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 319.401677][T14224] binder_alloc: 14221: binder_alloc_buf, no vma [ 319.442635][T14224] debugfs: File '14221' in directory 'proc' already present! 08:32:17 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, 0x0, &(0x7f0000000180), 0x8) 08:32:17 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) socketpair(0xb, 0x4, 0x2, &(0x7f0000000000)) 08:32:17 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x1) 08:32:17 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) fanotify_init(0x0, 0x2) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x630b, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:17 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x105000, 0x0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xa8}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x959, 0x100000000}, 0x8) [ 319.979313][T14251] debugfs: File '14248' in directory 'proc' already present! [ 320.006610][T14251] binder: 14248:14251 unknown command 1 [ 320.012451][T14251] binder: 14248:14251 ioctl c0306201 20000080 returned -22 08:32:18 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) ioctl$KVM_GET_TSC_KHZ(r0, 0xaea3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:18 executing program 4: mkdir(&(0x7f0000000180)='./file0\x00', 0x12c) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=ANY=[@ANYBLOB="0000000000000d434c8bbde500f93e9ff8fe9d48082448bd0e"], &(0x7f0000000100)='tmpfs\x00', 0x6, 0x2) 08:32:18 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000040)=@sack_info={0x0, 0x4, 0x81}, &(0x7f0000000080)=0xc) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) [ 320.046619][ T25] binder: unexpected work type, 4, not freed [ 320.054110][T14251] debugfs: File '14248' in directory 'proc' already present! [ 320.066881][ T12] binder: unexpected work type, 4, not freed 08:32:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x630c, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:18 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00'/10, 0x4) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:18 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) [ 320.373008][T14283] debugfs: File '14278' in directory 'proc' already present! [ 320.392007][T14283] binder: 14278:14283 unknown command 1 [ 320.397673][T14283] binder: 14278:14283 ioctl c0306201 20000080 returned -22 [ 320.420969][ T12] binder: unexpected work type, 4, not freed [ 320.445615][T14283] debugfs: File '14278' in directory 'proc' already present! [ 320.455146][T14289] binder: BINDER_SET_CONTEXT_MGR already set [ 320.461610][T14289] binder: 14278:14289 ioctl 40046207 0 returned -16 [ 320.467561][ T25] binder: unexpected work type, 4, not freed 08:32:18 executing program 0: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ppoll(&(0x7f0000000040)=[{r0}], 0x1, &(0x7f0000000080)={0x0, 0x1c9c380}, 0x0, 0x0) 08:32:18 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x1f) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:18 executing program 4: syz_mount_image$xfs(&(0x7f0000000000)='xfs\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x6, &(0x7f00000003c0)=[{&(0x7f0000000100)="22e294394039c5cf4c6d098bcedb2358d0505fdf04", 0x15, 0x9}, {&(0x7f0000000180)="ab9b514bb770cc5fa66fcbdc79b5ad410e0a593c1125f8489373f07228d8f38ab722e88c388a57482ded753b85a0f4b6bd45686f7eef65e22b41007c3f282c02f1132b68639b4823f98490c55d2f9ae0c0b27ca35352552e77b8ee11523957df4080688400785dc9772851b244288862", 0x70, 0x6}, {&(0x7f0000000200)="b0b411db28e1623721e9272621cbc8ca47da2fff962dd5157f5b6e817659640fd38b7e76", 0x24, 0x40}, {&(0x7f0000000240)="86af87976114bf3d97836a9b8f60f44c89cee939b8b908c9049c1daf3928975b97378186aa369d2eeb557a2d34b921674c1cae2b60371393ab502b0c48c4657d223b440962e9b036b1a40a40c3dfaa0c2a28afdf809098296250af914bc3cd41acb69ea436ea4291df1df8d3b31322b05568d57bbf27ef613594b8aee2d4ee0e146b96dfe91e9bbc01e2f4aee874b323f92aab0c3922aa76b6d1d08551e5944241d0ff81f6144e917efae6a72855ae1c1e", 0xb1, 0x9f}, {&(0x7f0000000300)="3e4675db3a4c93f87559841d4436e6f6cd95156520c18703ce43ae3cef8b8bb98520a6a1968cbe075e24551b2e375a8d7ef51d772466e7d3", 0x38, 0x5244}, {&(0x7f0000000340), 0x0, 0x8001}], 0x24, &(0x7f0000000480)={[{@norecovery='norecovery'}, {@sunit={'sunit', 0x3d, 0xffff}}, {@logdev={'logdev', 0x3d, './file0'}}, {@logbsize={'logbsize', 0x3d, [0x36, 0x6d]}}], [{@fsname={'fsname', 0x3d, 'self-'}}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000580)='./file0\x00', 0x2) 08:32:18 executing program 2: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x630d, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:18 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) r1 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x3, 0x2) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000100)={0xfa, 0x9, 0x8000, 0x70f39fb2, 0x0, 0x100000000, 0x8000}) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:19 executing program 2: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) [ 320.957841][T14306] debugfs: File '14298' in directory 'proc' already present! [ 320.990974][T14306] binder: 14298:14306 unknown command 1 [ 320.996748][T14306] binder: 14298:14306 ioctl c0306201 20000080 returned -22 08:32:19 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) openat$selinux_user(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/user\x00', 0x2, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200001, 0x0) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f0000ffd000/0x2000)=nil, 0x2000}) 08:32:19 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x100000) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 321.059677][ T12] binder: unexpected work type, 4, not freed [ 321.068519][T14306] debugfs: File '14298' in directory 'proc' already present! 08:32:19 executing program 0: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) membarrier(0x40, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:19 executing program 5: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000740)={'bcsf0\x00'}) r2 = memfd_create(&(0x7f0000000040)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000017c0)=ANY=[], 0x0) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x0, 0x1, 0x1000, 0x7fff, 0x100000001}) execveat(r2, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 321.140268][T14319] binder: BINDER_SET_CONTEXT_MGR already set [ 321.146317][T14319] binder: 14298:14319 ioctl 40046207 0 returned -16 08:32:19 executing program 2: write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:19 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000000)='./file0\x00', 0x3) 08:32:19 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:19 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0xafa4, 0x6180) write$selinux_create(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d5f753a6f626a6563745f723a6661696c6c6f675f743a7330202f7573722ff362696e2f63757073642031383434363734343037333730393535313630382000e6bc63113b166821b428805aaca7e0c1362b97694ffb705797356536240864ff095f75899d4b3597c53c3f7cc68981bed3741a0b568b477da71441834a"], 0x4c) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f0000000000)={'\x00', {0x2, 0x4e24, @multicast1}}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$FUSE_LSEEK(r0, 0x0, 0x0) [ 321.388869][T14340] debugfs: File '14338' in directory 'proc' already present! 08:32:19 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x3f00000000000000, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 321.508106][T14340] binder: BC_ACQUIRE_RESULT not supported [ 321.514121][T14340] binder: 14338:14340 ioctl c0306201 20000080 returned -22 08:32:19 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x104) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:19 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0xfe76) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x84000) sendmsg$inet6(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)="8184669fd3735aaa32d3f1593ca79ccb7f452dae53b4005b7a036bccd7df64b6d6e6e30325379f39ce49797aca9c22372c6d71e6c3c069a5d9c8eb3ebe38a4d8423277f5a78a95374b55aaf0b73f9853642d384bae085045d868e13ca56699e9d438b7e6fe8e5f9ef4693b66012fb40bdb4ce2e75b45f730a8c607890bc7d6435dc3f2504aa0cea561d18e2689971db63560cdfab303b916450b2d95dea34155e79d8ec91d963b094d30a2cc12b86454ac64e46d0149ea475af69208c1625a1ab7c802a98ffa7e8ff759d674b44fe6cc5585f1e1b60b28fe5300d372337a67da41dc64820fcd636e6650fbeb379ce084c5d4", 0xf2}, {&(0x7f0000000180)="06b15f28a3c95a015ccf03e8992c5e01202a135b77ba99c1840124ed1d90722f7454cf78ff64e80f921982899df2e74c74158662b5e74ca4e0fd556f65f45bf51c245c4fc7340a93415591c6c2eb922ad68519b61374e2f2dee214a0e3c7c46c2f2638f30739796567d804c60bd28de65ee53d59873ab71a4aee5b1c79b7567b2040db00ec43743902ac87b07c35144e6926f09bae137a959f103b2c3fe6b5f12fc786203631e4bb1cc075d35527a5880f2b4f42133aae323794a3ff85b73066779e0ff0f51da63f7ac76e34f43557aef72f072e6bfef4f1634e96615d5ae6604230bd495b8fbd6f", 0xe8}, {&(0x7f0000000300)="cf60a19b7b4ebedc1dcfa46c3048c22e820a43298534fc0f65a8b11e3aabcbdf2d6f6a4a90696785ee7479afe253528ae9850bcef5ace606eebb68f8c786bf6b2492284e36d0dcd045a4f1d5b7333751067884f1ca102c530d15e8736d1098e7703188ece4dd7b3c2ac8689ad5dad144d9b5a5946ec88bdacf52d55b42e8d1649806839a38c7d9590ce56076", 0x8c}], 0x3, &(0x7f00000003c0)=[@dstopts={{0x38, 0x29, 0x37, {0x21, 0x3, [], [@hao={0xc9, 0x10, @mcast2}, @pad1, @jumbo={0xc2, 0x4, 0xd4}, @pad1]}}}, @hoplimit={{0x14, 0x29, 0x34, 0xffffffff}}, @flowinfo={{0x14, 0x29, 0xb, 0x97f8}}, @dstopts={{0x28, 0x29, 0x37, {0x3f, 0x1, [], [@padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @rthdrdstopts={{0x20, 0x29, 0x37, {0xff, 0x0, [], [@pad1]}}}], 0xb0}, 0x40000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:19 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) [ 321.627103][T14360] debugfs: File '14358' in directory 'proc' already present! [ 321.642391][ T25] binder: unexpected work type, 4, not freed [ 321.649732][T14340] debugfs: File '14338' in directory 'proc' already present! [ 321.676752][T14360] binder: BINDER_SET_CONTEXT_MGR already set [ 321.683019][T14360] binder: 14358:14360 ioctl 40046207 0 returned -16 [ 321.702609][T14362] binder: BC_ACQUIRE_RESULT not supported [ 321.708424][T14362] binder: 14338:14362 ioctl c0306201 20000080 returned -22 08:32:19 executing program 1: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000140)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x2, [@default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) sendmsg$nl_crypto(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000010}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=@delrng={0x10, 0x14, 0x100, 0x70bd25, 0x25dfdbff, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x0) write$FUSE_LSEEK(r0, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x2, @mcast1, 0x9}, 0x1c) 08:32:19 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, 0x0, 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) [ 321.754957][ T25] binder: unexpected work type, 4, not freed [ 321.783582][ T25] binder: unexpected work type, 4, not freed 08:32:19 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x10) ioctl$VT_RELDISP(r2, 0x5605) 08:32:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40046304, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:19 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x420081, 0x0) r1 = semget$private(0x0, 0x7, 0xe2) semctl$SETVAL(r1, 0x4, 0x10, &(0x7f0000000380)=0x100000001) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x10000, 0x0, 0xe, 0x5, 0x1c, "f77da7e8b3cfa2b3380e71dac39b1e43bf640724f96b4bc1863d2fef63e1ff74077ae2158a4ca73d7dc85d5059b4824628438cd86e05061891114b62a80e4d33", "53b52f0f47699368b15d377c77966eede43d7520a92d5641d1300372813e0c0730a2c00b51b905b471ebeab6c8b0b7be6e668cfc9975cb85232df3db5663fa7a", "e498cb36b2ef59ff375d1e1115b39b8f4dbb9ea6227b7e6bf79f4a0446d77cf3", [0x399c, 0x8]}) r2 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x1, 0x2) write$USERIO_CMD_SET_PORT_TYPE(r2, &(0x7f0000000100)={0x1, 0x3}, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000002c0)={0x3, 0x6, 0x0, 'queue0\x00', 0xb386}) 08:32:20 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_LSEEK(r3, 0x0, 0x0) 08:32:20 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0xfffffffffffffe3c) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup(r1) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x1) r3 = msgget$private(0x0, 0x4) msgsnd(r3, &(0x7f0000000040)={0x3, "6404e74a65820f719da9cb11d361c0c03d4a3f0775c4d79e00784412dc6b937ab1c27b807c3a113d6e0953eb2e9bc9733cde5fc52f"}, 0x3d, 0x800) [ 322.086158][T14394] debugfs: File '14390' in directory 'proc' already present! [ 322.148348][T14394] binder_alloc: 14390: binder_alloc_buf, no vma 08:32:20 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:20 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x10) ioctl$VT_RELDISP(r2, 0x5605) [ 322.220729][T14399] binder: 14390:14399 unknown command 0 [ 322.226386][T14399] binder: 14390:14399 ioctl c0306201 20000080 returned -22 08:32:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 322.289199][T14394] debugfs: File '14390' in directory 'proc' already present! 08:32:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_LSEEK(r3, 0x0, 0x0) 08:32:20 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40046307, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:20 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) signalfd(r0, &(0x7f0000000040)={0x9}, 0x8) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000bd0000030003000000010000000000010000000000000000000000000020"], 0x2b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x20000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f0000000100)={0x1, [0x0]}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000180)={r2, 0x4, 0x10}, 0xc) socket$inet_udp(0x2, 0x2, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 322.534279][T14427] debugfs: File '14425' in directory 'proc' already present! 08:32:20 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x10000000) 08:32:20 executing program 2: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) [ 322.582634][T14427] binder: 14425:14427 unknown command 0 [ 322.588313][T14427] binder: 14425:14427 ioctl c0306201 20000080 returned -22 08:32:20 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) r2 = creat(&(0x7f0000000100)='./file1\x00', 0x10) ioctl$VT_RELDISP(r2, 0x5605) [ 322.687368][ T25] binder: unexpected work type, 4, not freed [ 322.699168][T14427] debugfs: File '14425' in directory 'proc' already present! 08:32:20 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8916, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.usage_sys\x00\xc7\xec\xac\xd9&{\x0f\x96\xad\xd1\x8fl![\x8f\xb9\f\xca\x1d\xc2{\xee\xb7\x03K\x0f\xa6\x00;\xf6\x89\xf7b^\xa5\xafI\r\xc4\x9f\v\xf2\x1c\xdc\xddpr\xb7\xbb\x1b\xfev\xea\xed\xe0\xaa\xe8\xceR`\xbb\xf2\xed;pC\x19\xbfn\x16\xaa\x199\xfe.Q\xebvB\xd2\x19&\xdbA\x1bn\xbcSv\x91->y\xfe\xfa\xfb/\x18g\x80y\xfe\x89\xab\x0e\xab\xac\b\'\xcd', 0x26e1, 0x0) close(r0) close(r1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xc0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x3, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)}}, 0x10) r2 = socket$kcm(0xa, 0x2, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)) sendmsg$kcm(r2, &(0x7f0000001900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001580)=[{0x18, 0x1, 0x1, "ec"}], 0x18}, 0x0) bpf$OBJ_GET_PROG(0x7, 0x0, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$FUSE_LSEEK(r3, 0x0, 0x0) 08:32:20 executing program 2: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40086303, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:20 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="ff074c60710000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000100)=""/87) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:20 executing program 4: mkdir(&(0x7f0000000000)='./file0/file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 322.935980][T14451] debugfs: File '14450' in directory 'proc' already present! [ 323.016700][T14451] binder_alloc: 14450: binder_alloc_buf, no vma 08:32:21 executing program 2: openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(0xffffffffffffffff, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x4, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:21 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) creat(&(0x7f0000000100)='./file1\x00', 0x10) [ 323.060555][T14451] binder: 14450:14451 unknown command 0 [ 323.066213][T14451] binder: 14450:14451 ioctl c0306201 20000080 returned -22 [ 323.098304][T14451] debugfs: File '14450' in directory 'proc' already present! 08:32:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0xb) chmod(&(0x7f0000000180)='./file0\x00', 0xab) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x8, 0x200) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000100)=0x6) [ 323.142955][T14457] binder: 14450:14457 unknown command 0 [ 323.148619][T14457] binder: 14450:14457 ioctl c0306201 20000080 returned -22 08:32:21 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40046307, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:21 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 08:32:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x4008630a, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:21 executing program 5: execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000200)=[&(0x7f0000000080)='\x00', &(0x7f0000000480)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\xa1GPLwlan1keyring\x00', &(0x7f00000001c0)='[user\x00'], &(0x7f00000003c0)=[&(0x7f0000000440)='=#-ppp0\x00', &(0x7f0000000280)='=#-ppp0\x00', &(0x7f0000000300)='\x00', &(0x7f0000000400)='!j\x00']) r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:21 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getuid() stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000000)='./file0\x00', r0, r1) [ 323.389771][T14483] debugfs: File '14478' in directory 'proc' already present! [ 323.408573][T14484] debugfs: File '14479' in directory 'proc' already present! [ 323.446115][T14484] binder: BC_ATTEMPT_ACQUIRE not supported [ 323.452245][T14484] binder: 14479:14484 ioctl c0306201 20000080 returned -22 [ 323.464263][T14483] binder: BINDER_SET_CONTEXT_MGR already set [ 323.470532][T14483] binder: 14478:14483 ioctl 40046207 0 returned -16 08:32:21 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/policy\x00', 0x0, 0x0) connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0xffffffff}, 0x10) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f00000002c0)=ANY=[@ANYBLOB="01000900aaaaaaaaaabbffffffffffffffffffb00cdcd1f5efa115bbffffffffffff0180c200000f0180c000000ee4318410d27f000000000000"]) r1 = syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0x3, 0x2) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="1000000017020007002e2f66696c4865"], 0x10) listxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=""/71, 0x47) setsockopt$inet_MCAST_LEAVE_GROUP(r1, 0x0, 0x2d, &(0x7f0000000180)={0x0, {{0x2, 0x4e20, @multicast1}}}, 0x88) 08:32:21 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) [ 323.491295][ T25] binder: unexpected work type, 4, not freed [ 323.499128][T14484] debugfs: File '14479' in directory 'proc' already present! [ 323.521611][T14483] binder: 14478:14483 unknown command 0 [ 323.527232][T14483] binder: 14478:14483 ioctl c0306201 20000080 returned -22 [ 323.539773][T14484] binder: BINDER_SET_CONTEXT_MGR already set [ 323.546113][T14484] binder: 14479:14484 ioctl 40046207 0 returned -16 [ 323.546119][ T25] binder: unexpected work type, 4, not freed [ 323.570546][ T25] binder: unexpected work type, 4, not freed 08:32:21 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x6) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) 08:32:21 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = getuid() chown(&(0x7f0000000000)='./file0\x00', r0, 0x0) 08:32:21 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x102, 0x0) name_to_handle_at(r1, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=ANY=[@ANYBLOB="8d00000007000000476e124d9083729480c8bc3ce33b55273bccdb2ec1cc2603edda5a1b2c1859a304bd482ec640e9d409549a9fcb9eba82b31d9faf3151aa76af83eb5cdcf64b4585a3408c05357a2da616c7aa7a32fd9b7e078a7d44a1b223405075efa2723ff45ad421aac7b6417523555a34a218e988acc881f9e61fb8cf9f6996bfcc407a8c64908355a1"], &(0x7f00000001c0), 0x400) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:21 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, 0x0, 0x0) 08:32:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40086310, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:21 executing program 4: setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000180)='./file0\x00', 0x8, 0x0) setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.nlink\x00', &(0x7f0000000240)={'U-', 0xe4}, 0x28, 0xc7ec41763f18b5d1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) [ 323.869205][T14517] debugfs: File '14513' in directory 'proc' already present! 08:32:21 executing program 2: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) write$FUSE_NOTIFY_INVAL_ENTRY(r0, &(0x7f00000001c0)={0x37, 0x3, 0x0, {0x0, 0x16, 0x0, '/selinux/checkreqprot\x00'}}, 0x37) 08:32:21 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 323.945533][T14517] debugfs: File '14513' in directory 'proc' already present! [ 323.964330][T14522] binder: 14513:14522 unknown command 0 [ 323.970036][T14522] binder: 14513:14522 ioctl c0306201 20000080 returned -22 08:32:22 executing program 1: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000080)={'vcan0\x00', {0x2, 0x4e21, @broadcast}}) getpeername$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000200)=0x14) recvfrom$packet(r2, &(0x7f00000003c0)=""/165, 0xffffffffffffffd4, 0x94ea888b520d7065, &(0x7f0000000480)={0x11, 0x19, r3, 0x1, 0x1f85c00, 0x6, @dev={[], 0x2a}}, 0x14) 08:32:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.opaque\x00', &(0x7f0000000100)='y\x00', 0x2, 0x3) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 08:32:22 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000380000009741d1c80000000000002000"/43], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x400c630e, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:22 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 324.247409][T14545] debugfs: File '14539' in directory 'proc' already present! 08:32:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 324.296704][ T12] binder: unexpected work type, 4, not freed [ 324.317306][T14550] debugfs: File '14549' in directory 'proc' already present! 08:32:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x9) prctl$PR_SET_FPEXC(0xc, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x171b5) 08:32:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x5d, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:22 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) getsockopt$inet6_udp_int(r0, 0x11, 0x6f, &(0x7f0000000040), &(0x7f0000000080)=0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 324.369538][T14550] binder_alloc: 14549: binder_alloc_buf, no vma [ 324.440833][T14550] binder: 14549:14550 unknown command 0 [ 324.446625][T14550] binder: 14549:14550 ioctl c0306201 20000080 returned -22 [ 324.481705][T14561] debugfs: File '14560' in directory 'proc' already present! 08:32:22 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:22 executing program 4: open(&(0x7f0000000200)='./file0\x00', 0x101200, 0x1) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000180)='/dev/null\x00', 0x111002, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(r0, 0x894b, &(0x7f00000001c0)) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000100)='./file0\x00', 0x44) chmod(&(0x7f0000000080)='./file0\x00', 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x1d) [ 324.539693][T14561] binder: BINDER_SET_CONTEXT_MGR already set [ 324.546014][T14561] binder: 14560:14561 ioctl 40046207 0 returned -16 [ 324.563559][T14568] debugfs: File '14563' in directory 'proc' already present! [ 324.575521][T14550] debugfs: File '14549' in directory 'proc' already present! [ 324.597848][T14555] binder: 14549:14555 unknown command 0 [ 324.603634][T14555] binder: 14549:14555 ioctl c0306201 20000080 returned -22 [ 324.616731][ T3016] binder: unexpected work type, 4, not freed [ 324.632069][T14568] binder_alloc: 14563: binder_alloc_buf, no vma 08:32:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x400c630f, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:22 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 324.648508][ T25] binder: unexpected work type, 4, not freed [ 324.679727][ T25] binder: unexpected work type, 4, not freed 08:32:22 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ppoll(&(0x7f0000000040)=[{r0, 0x208}, {r0, 0x1220}, {r0, 0x80}, {r0, 0x20}, {r0}, {r0, 0x10}, {r0, 0x9}, {r0, 0x80}, {r0, 0x10a}, {r0, 0x40}], 0xa, &(0x7f0000000100)={0x77359400}, &(0x7f0000000140)={0x7}, 0x8) 08:32:22 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 324.831457][T14587] debugfs: File '14580' in directory 'proc' already present! [ 324.844611][T14588] debugfs: File '14585' in directory 'proc' already present! [ 324.860307][T14588] binder: BINDER_SET_CONTEXT_MGR already set [ 324.866445][T14588] binder: 14585:14588 ioctl 40046207 0 returned -16 08:32:22 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$sock(r0, &(0x7f0000001700)={&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x2, 0x2, 0x2, 0x2}}, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000180)="7ddab9d05e68b13be91daeb7b55be4497d6c5522c8cce0312bcb4f194c2ed35cbf3e00d55383ea2775ffa6f0ba836085f37ceb6741382547be07e88b95347b9d6e3ebe79dd8bb7c71e953c67d09d3336bbb263aa2bc690edff26dfc0684f57d993561f04599ee326355591aa9d620c23ccdf745d56c1d87f2f8ab25b552f8d5ffb40f83ea73de3c8a4e37f6a909eb3986a549c44982b1ad20395fc195287223665534c941854e9956a73c61cc94f6dd45d5ba404", 0xb4}, {&(0x7f0000000240)="3d97bb4d654e517ef4041bc7bd647819e7896f72060dd72d6cfd8d02d55635486c9356f5db43e29ae8f2e33aba8690990607df702bcab278bdbbbaec1dbce3fb12d9e53bf998f34a3266006cff1e6abf835250fbb763b123648bee0b20ee5052fdbd7d7bce", 0x65}, {&(0x7f00000002c0)="6676c8e8561961aeb6cd948461d3b6e7b6fbcfd8967d504c1bf25fd9d4378718d5f5b7b0666f9a76ccb28edbdfb404839d9186372871a94a90161c5bf744381ff2a13254d9f7c85517bacd182e32abb7f9351af9b709b25c2d16546eff05f5f765a4414394c6bd156208ff101d436e8f1b950554f4149e069bfeffee4e1669539e486501160c1b64735bbe05a4540dc4c4204654a237ca", 0x97}, {&(0x7f00000003c0)="0560d24d3404388208cd587ad4f341f20ffe36f5898e0d9a7a1a6f6f125b454d7836a33889af87eab11d6c2c0e6c50fee80fe98ae7a8be0fe8bd169179685164b3495c", 0x43}, {&(0x7f0000000440)="d29a34d1d056fcc0e3de3af5e75db2078a7f659359509a7ff801", 0x1a}, {&(0x7f0000000480)="5787ae0e5608c4677edaa3a29a7a6953e267801c44c6534183c702fbb691676f04db232802934a9517a94501d2db244e31c650b30c8e7636335d6e5954bb1497eb45b801784a56959023e434aec5d4115329829c5ff7551ca5d7f980e309e7655d0608773836f04d3bf3dad12dbc442882667aeae18fa885cdeb05d36af18ba551be0cfe59537e317fcc6625313b67beeb", 0x91}, {&(0x7f0000000540)="51ab0f2cdd9c09639a3b7f6ef3abe6", 0xf}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000001580)="a576539e16581dc159a5320e5b4d0d0582cde48e57", 0x15}], 0x9, &(0x7f0000001680)=[@mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14, 0x1, 0x24, 0x7}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @mark={{0x14, 0x1, 0x24, 0xa192}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0x78}, 0x4810) [ 324.881215][T14586] debugfs: File '14584' in directory 'proc' already present! [ 324.893778][ T25] binder: unexpected work type, 4, not freed [ 324.901565][T14586] binder: BINDER_SET_CONTEXT_MGR already set [ 324.907678][T14586] binder: 14584:14586 ioctl 40046207 0 returned -16 08:32:22 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:23 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 324.943618][T14592] binder: 14585:14592 ioctl c018620c 20000080 returned -22 [ 324.957850][T14594] binder: 14584:14594 unknown command 0 [ 324.963564][T14594] binder: 14584:14594 ioctl c0306201 20000080 returned -22 [ 325.025823][T14586] debugfs: File '14584' in directory 'proc' already present! [ 325.064437][ T25] binder: unexpected work type, 4, not freed 08:32:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:23 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x4) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x401, 0x90000) write$USERIO_CMD_REGISTER(r1, &(0x7f0000000080)={0x0, 0x1}, 0x2) [ 325.071115][T14600] debugfs: File '14599' in directory 'proc' already present! 08:32:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f00000000c0)='./file0\x00', 0x100) 08:32:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40106308, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:23 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:23 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x4) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 325.246181][T14608] debugfs: File '14606' in directory 'proc' already present! [ 325.280776][T14618] debugfs: File '14613' in directory 'proc' already present! [ 325.342119][T14618] binder: 14613:14618 unknown command 0 [ 325.347776][T14618] binder: 14613:14618 ioctl c0306201 20000080 returned -22 [ 325.365957][T14625] debugfs: File '14622' in directory 'proc' already present! [ 325.370943][T14608] binder: BINDER_SET_CONTEXT_MGR already set [ 325.379407][T14608] binder: 14606:14608 ioctl 40046207 0 returned -16 08:32:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='aiW\xdd\xda\x97m\xe5}\xf4(9\x91d\xf9\x02\xb4zE~\xed\x9b\x1c\xe6%Z#I\xb2\xb6J\x01\x04/TB\xc7\xee\v\xc9\xb5\xf0', 0x3, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x16e, 0x8040) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x80) fanotify_mark(r0, 0x2, 0x10, r1, &(0x7f00000001c0)='./file0\x00') setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240), 0x4) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x80, 0x8}, 0xc) signalfd4(r2, &(0x7f0000000040)={0x200}, 0x8, 0x80000) [ 325.426563][ T3016] binder: unexpected work type, 4, not freed [ 325.433919][T14618] debugfs: File '14613' in directory 'proc' already present! [ 325.441688][T14623] binder: 14606:14623 ioctl c018620c 20000080 returned -22 [ 325.445743][T14625] binder: BINDER_SET_CONTEXT_MGR already set [ 325.454959][T14625] binder: 14622:14625 ioctl 40046207 0 returned -16 08:32:23 executing program 0: mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:23 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) arch_prctl$ARCH_GET_CPUID(0x1011) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[], 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) pwrite64(r1, &(0x7f0000000080)="feff2316d68d19cf9694a9eafeb2dc88cdcae82abb3241862c048068f0d5417b0f986bdf2c00e8193d0dea949f153f4bde06f13533db0a0780", 0x39, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 325.487822][T14632] binder: BINDER_SET_CONTEXT_MGR already set [ 325.494279][T14632] binder: 14613:14632 ioctl 40046207 0 returned -16 [ 325.497665][T14633] binder_alloc: 14613: binder_alloc_buf, no vma [ 325.513324][ T3016] binder: unexpected work type, 4, not freed 08:32:23 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40106309, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:23 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:23 executing program 0: mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:23 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='aiW\xdd\xda\x97m\xe5}\xf4(9\x91d\xf9\x02\xb4zE~\xed\x9b\x1c\xe6%Z#I\xb2\xb6J\x01\x04/TB\xc7\xee\v\xc9\xb5\xf0', 0x3, 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x16e, 0x8040) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x20000, 0x80) fanotify_mark(r0, 0x2, 0x10, r1, &(0x7f00000001c0)='./file0\x00') setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000240), 0x4) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x80, 0x8}, 0xc) signalfd4(r2, &(0x7f0000000040)={0x200}, 0x8, 0x80000) [ 325.779390][T14653] debugfs: File '14651' in directory 'proc' already present! [ 325.795691][T14655] debugfs: File '14652' in directory 'proc' already present! [ 325.819874][T14660] debugfs: File '14654' in directory 'proc' already present! 08:32:23 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460000000000005fc29d7f000300000000cedc000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:23 executing program 0: mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 325.880716][T14653] debugfs: File '14651' in directory 'proc' already present! [ 325.884843][T14655] binder_alloc: 14652: binder_alloc_buf, no vma 08:32:23 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 325.925888][T14655] binder: 14652:14655 ioctl c018620c 20000080 returned -22 [ 325.931013][T14661] binder: BINDER_SET_CONTEXT_MGR already set [ 325.939439][T14661] binder: 14651:14661 ioctl 40046207 0 returned -16 [ 326.039546][T14677] debugfs: File '14669' in directory 'proc' already present! 08:32:24 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:24 executing program 0: mkdir(0x0, 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:24 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = dup3(r0, r0, 0x80000) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2) 08:32:24 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chmod(&(0x7f0000000080)='./file0\x00', 0x0) r0 = accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@bcast, @default, @null, @null, @rose, @netrom, @rose, @bcast]}, &(0x7f0000000000)=0x48, 0x800) connect(r0, &(0x7f0000000180)=@l2={0x1f, 0x5, {0x5, 0x5, 0xabe8, 0x4, 0x5, 0x2174}, 0x1, 0x3}, 0x80) r1 = semget$private(0x0, 0x7, 0x5) semctl$GETVAL(r1, 0x3, 0xc, &(0x7f0000000200)=""/183) 08:32:24 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:24 executing program 0: mkdir(0x0, 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) [ 326.310084][T14694] debugfs: File '14693' in directory 'proc' already present! [ 326.320141][T14690] debugfs: File '14689' in directory 'proc' already present! [ 326.334610][T14690] binder: BINDER_SET_CONTEXT_MGR already set [ 326.340939][T14690] binder: 14689:14690 ioctl 40046207 0 returned -16 [ 326.340944][ T25] binder: unexpected work type, 4, not freed [ 326.343592][T14694] debugfs: File '14693' in directory 'proc' already present! [ 326.369034][T14690] binder: 14689:14690 ioctl c018620c 20000080 returned -22 08:32:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406302, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:24 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 326.496118][T14707] debugfs: File '14705' in directory 'proc' already present! 08:32:24 executing program 0: mkdir(0x0, 0x4) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:24 executing program 5: r0 = memfd_create(&(0x7f0000000080)='ppp0\x00', 0x7) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 326.546850][T14712] debugfs: File '14711' in directory 'proc' already present! 08:32:24 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 326.634889][T14712] binder_alloc: 14711: binder_alloc_buf, no vma [ 326.656396][T14721] debugfs: File '14719' in directory 'proc' already present! 08:32:24 executing program 4: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000001140)='/selinux/checkreqprot\x00', 0x2001, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/attr/current\x00', 0x2, 0x0) r2 = add_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="cc9b16ebb41585817eb778d269e55a74eb4dffdf43cc0b500f65348703e2ea866b0f167d64e90dc9b89e5aa59ec80fc4a46d432e730299c5bfd48f30e4e6ad010b3ca72116e96ca0a9644cfdaa69bef3ab619af0dd1ab8a666c32575f9f8fc1ac7a5f8f95abda60c693b34917878164a0716ea65497b75cbd7a7ed21687e88f6403714138d1de4a0078128e6640c3f9f2cb5b47508b772c8c9a155abee77f6bbd9319ecf81e3e621a999bb3c8b4dcfa896c6ce450b8c82b80759bca112c0b237683f639b86e19edf03b80dac59eca3818782501261436a28b4e16efd3c5bd057f36d794e377d71021970a7ea", 0xec, 0xfffffffffffffffb) r3 = add_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={'syz', 0x3}, &(0x7f0000000240)="30f171188dd9b6b9640bfd19e9fb9d24378d7237c8465656fdc35c5d1d6467592033b88a855b7266be09e195a9713ba09af098b138f9e38d8324d93edbceda0728e01ea5b2707e097180b4d35eefdb744710e9b82017ec136a9427e78c10ce954f0d4cc5be6dcdb587c945153a665e5207bfd7098695e74bb70c", 0x7a, 0xfffffffffffffffb) r4 = socket$inet6(0xa, 0x40000000003, 0x101) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000080)={{{@in6=@remote, @in, 0x3, 0x2, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@initdev}}, 0xe8) connect$inet6(r4, &(0x7f0000000040), 0x1c) keyctl$unlink(0x9, r2, r3) write$FUSE_LSEEK(r0, 0x0, 0x0) 08:32:24 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 326.697850][T14721] binder: 14719:14721 ioctl c018620c 20000080 returned -22 [ 326.708596][T14718] binder: 14711:14718 unknown command 1077961474 [ 326.715226][T14718] binder: 14711:14718 ioctl c0306201 20000080 returned -22 [ 326.769594][T14712] debugfs: File '14711' in directory 'proc' already present! [ 326.799040][T14731] debugfs: File '14729' in directory 'proc' already present! [ 326.810291][ T25] binder: unexpected work type, 4, not freed 08:32:24 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406303, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 326.874334][T14737] debugfs: File '14736' in directory 'proc' already present! 08:32:24 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x10000) ioctl$VT_WAITACTIVE(r1, 0x5607) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000300)=""/4096) 08:32:24 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:25 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 327.030992][T14748] debugfs: File '14745' in directory 'proc' already present! [ 327.091010][T14748] binder_alloc: 14745: binder_alloc_buf, no vma [ 327.119673][T14748] binder: 14745:14748 unknown command 1077961475 [ 327.126273][T14748] binder: 14745:14748 ioctl c0306201 20000080 returned -22 [ 327.145013][T14755] debugfs: File '14753' in directory 'proc' already present! 08:32:25 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:25 executing program 5: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x200200, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r0, &(0x7f0000000100)="922834f8b5b6ea493e1ca37a55dfa8f2413c2d8ab0d6a9107895a3aa6eeb87fb5eb45f01ecfd70f2b93229399967332d791c72a2d43cc45bfde341afb79e07a00792258548eeca89dcdf6482928ed42ba175c50bad08fddd553c051c04de8186023ca5c2d922df3c1d4b23146fb53cc3a61238c93267149058eac104601de3f1fa590c767e2d236fb2d6f5347b0f7d348a0753b6f8330d762cdc3833", &(0x7f00000001c0)=""/85}, 0x18) r1 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000003c0)={@nfc_llcp={0x27, 0x0, 0x1, 0x0, 0x100, 0xffff, "4e09f7466681f438817094533979224320cc82dcbb26256f736ff7eb9d90c4c552f81b48da48076b75819a0f0eeb630ce39200dff1dcaf8d6346bcaa48b8db", 0x7}, {&(0x7f0000000300)=""/137, 0x89}, &(0x7f0000000240), 0x4}, 0xa0) write$binfmt_elf32(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000000000003800000000ff00020000000000001f"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 327.187084][T14748] debugfs: File '14745' in directory 'proc' already present! [ 327.197226][T14761] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 327.217131][T14755] binder: 14753:14755 ioctl c018620c 20000080 returned -22 08:32:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406304, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:25 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 327.461583][T14780] debugfs: File '14779' in directory 'proc' already present! 08:32:25 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:25 executing program 5: r0 = memfd_create(&(0x7f0000000180)=';\xc8\xd8\xb0\xb0\xf9\f\xb3\xe0\xcc\xffnh\x18Lt \x00\x00\x00\x00\x00\x00\x00\x00\xf8\x81\x9dV+\xd8\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 327.533451][T14780] debugfs: File '14779' in directory 'proc' already present! [ 327.566898][T14790] binder_alloc: 14779: binder_alloc_buf, no vma 08:32:25 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406305, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, 0x0, &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:25 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:25 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 327.849601][T14808] debugfs: File '14807' in directory 'proc' already present! 08:32:25 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f46000000000000000000000000030003000000000000000000380000000020"], 0x2b) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x4ba1bb38, 0x101042) execveat(r1, &(0x7f0000000040)='./file0\x00', 0x0, 0x0, 0x1000) [ 327.918514][T14808] binder: 14807:14808 unknown command 1077961477 [ 327.927475][T14808] binder: 14807:14808 ioctl c0306201 20000080 returned -22 08:32:26 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:26 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:26 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:26 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000010000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 328.080468][ T25] binder: unexpected work type, 4, not freed [ 328.087823][T14808] debugfs: File '14807' in directory 'proc' already present! 08:32:26 executing program 2: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 328.133405][ T25] binder: unexpected work type, 4, not freed 08:32:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406306, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:26 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:26 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) dup2(r2, r1) 08:32:26 executing program 5: r0 = memfd_create(&(0x7f0000000040)='keyring\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380080000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:26 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:26 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 328.441569][T14850] debugfs: File '14849' in directory 'proc' already present! [ 328.456139][T14850] binder: 14849:14850 unknown command 1077961478 [ 328.462819][T14850] binder: 14849:14850 ioctl c0306201 20000080 returned -22 08:32:26 executing program 1: r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 328.529759][ T25] binder: unexpected work type, 4, not freed [ 328.537416][T14850] debugfs: File '14849' in directory 'proc' already present! [ 328.559773][ T25] binder: unexpected work type, 4, not freed 08:32:26 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) dup2(r2, r1) 08:32:26 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406307, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:26 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:26 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 328.859823][T14887] debugfs: File '14885' in directory 'proc' already present! 08:32:26 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', 0x0, 0x1, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:26 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) dup2(r2, r1) 08:32:26 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x800, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000100)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@remote}}, &(0x7f0000000200)=0xe8) sendmsg$xdp(r1, &(0x7f0000000740)={&(0x7f0000000240)={0x2c, 0x38458af0aaed857c, r2, 0x19}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000300)="3ff3da9b89ccf105f18f3fdeaf8958d900e3f149a227fb9db6a2e375460d6540a07f035b4d43b4c02881c9132356aaa29115eccf83de0f4fcdd81d1f0228c649a26a2c35ed7a34339be134be17b15db849963a5934a6e174f1f9b7928f3a6620340aebed72766f9e45c7324474bb4ce909645583c965ecabab792c7055c84541861f64179c1bed298aa86892b3965f726466cf2998ae05271483e27bc6ef0beb9471d079e130d7a10cfdc9e0a6bd7256ec704b7a49ca26c427ddfa873d5a9224f4973669343835ef84cb6e2c0e3dd411a24568a9497295106b1b2535edc3570d8c3492c41b87f31afda15c7b2c471b6d4c6a88", 0xf3}, {&(0x7f0000000400)="ddd88e9d92d480aab248345e9fd8bf17bb312ae009a451b7f969e877744a30dc066a2734b00b618b447eff705760408ec48b627bf4db918fe7ae480bf584f55c51a02435645c13024787521f78328b2d26c82a3b0a7b119b7d4ed72cd0f4f3dc56c7b94a0dc0b558022af6a424f072aec0f02f32470f40e690a807ecddd9c28badaf2b2c5fd7186d3ce940353dc4a7923767146b7967392d79f53b92d345e49c895541d71c45b3a784f8c87becbe6c05fff84c808cd4f31c9b39f71d60b459aa4afd5e8b66d72592e9816e6a1dac8974f09db4f270e9aa9fa4943ce71fe2a020ff36", 0xe2}, {&(0x7f0000000500)="d3246c11e2f50ad8b6928c951e98da6b9613b6e8160710e1478c405f66db8a9120ba74bd5edc8f8036456330c77cc4e4f0de6590e2e847c029ebb43af04b6f4acf2150ca2838fddfbd6af22c78fe43e5fd8a0a0f74727b60e4c976669140637f4887f8f36c3085bb9a0242a42f3572de2b7fc1944b98488774dfa0765684c6957b0ef98fbc42b1c85ac1e5e14757f829bc490d31030ee7edc7176d4c769212a88e1ca62730280b472a1c774cd631f53f832ec20fcefe", 0xb6}, {&(0x7f00000005c0)="a2b7e1043f328b7c90ff771c5f68c8c0c018d02537769633f6105fce8e02d520654d79f1f203131c0f5a3ccf44e30ad32bc84890c490d0da93717bf2e6c3ede712761f9b16e163c5b2efe12ab4a1ffbcfd8d4a8adead706a6a84de7648c534716497b4a9a17b5532851fa27d87d889c27863e16c64a46b37de2dcbaace270ac9016b2857a4764b214b718984791fb1f46120a3bebbba9b580cf5616c6da1a62830ff0298942479d2c1e2189ca804407c6cbc9063339ddeab8fa2663fd6b95eaf7c", 0xc1}, {&(0x7f0000000280)="cdc7465ed53109c9a93720468b9ad2a1368d6ae63308637734b7fcf836c750097b07048a488e8c317366472e55dbf9aef286", 0x32}], 0x5, 0x0, 0x0, 0x4}, 0x800) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:26 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 328.965337][T14887] binder_alloc: 14885: binder_alloc_buf, no vma [ 328.994746][T14887] binder: 14885:14887 unknown command 1077961479 [ 329.001380][T14887] binder: 14885:14887 ioctl c0306201 20000080 returned -22 08:32:27 executing program 2: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 329.067289][T14887] debugfs: File '14885' in directory 'proc' already present! 08:32:27 executing program 1: syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:27 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:27 executing program 5: r0 = memfd_create(&(0x7f0000000100)=']\'%user]{D\xf9\x00', 0x4) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$netlink(0x10, 0x3, 0xd) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_TOL(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x82000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x68, r2, 0x400, 0x70bd25, 0x25dfdbfd, {{}, 0x0, 0x4107, 0x0, {0x4c, 0x18, {0x5, @media='eth\x00'}}}, ["", "", ""]}, 0x68}}, 0x4000080) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000040)) 08:32:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:27 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:27 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:27 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:27 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 329.397896][T14921] debugfs: File '14914' in directory 'proc' already present! [ 329.460056][T14926] debugfs: File '14924' in directory 'proc' already present! [ 329.462586][T14921] binder: 14914:14921 unknown command 1077961490 [ 329.474090][T14921] binder: 14914:14921 ioctl c0306201 20000080 returned -22 08:32:27 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:27 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 329.562389][ T3016] binder: unexpected work type, 4, not freed [ 329.569861][T14921] debugfs: File '14914' in directory 'proc' already present! 08:32:27 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:27 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYPTR64=&(0x7f0000000080)=ANY=[@ANYBLOB]], 0x8) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x800, 0x100) r2 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x6, 0x100) renameat2(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', r2, &(0x7f0000000140)='./file0\x00', 0x1) execveat(r1, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x1000) [ 329.610917][ T3016] binder: unexpected work type, 4, not freed [ 329.644189][T14940] debugfs: File '14938' in directory 'proc' already present! 08:32:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:27 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, 0x0) chown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 08:32:27 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:27 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:27 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000040)) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) truncate(&(0x7f0000000080)='./file0\x00', 0x0) [ 329.842932][T14954] debugfs: File '14950' in directory 'proc' already present! 08:32:27 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 329.925317][T14961] debugfs: File '14955' in directory 'proc' already present! [ 329.934322][T14954] debugfs: File '14950' in directory 'proc' already present! [ 329.954983][T14963] debugfs: File '14958' in directory 'proc' already present! 08:32:28 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:28 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc018620c, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:28 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(0x0, 0x0, 0x0) 08:32:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40486312, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:28 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:28 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c460000000000000000000002000300030000000000000000003800000000000000000000000000201ac1e2aa75eb3d31652004d2d4c6bb96a6ca9100118b1ea17d5d37829a018058befc493c607a0ab51c9ccfbbccc92ffa29042a50034bd944aaaea96afca796aa579e59e72de52b4c5a4e1c66920cd99d6a4745858448a6fb29ac1a02f72fe93470bd0baac755eaeef05582033d4a5ea38af09d7da5bcb8abb55425d1c8a40f0244ba95fe02d3e6095d8d20beadda11e5a319ba676b56fee05feb35950edcf744a394201d2b2780f7354bc4309e3886105afc9cc7ebf7d069d921f1103a044b0c"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 330.145368][T14978] debugfs: File '14976' in directory 'proc' already present! [ 330.155963][T14977] debugfs: File '14975' in directory 'proc' already present! [ 330.220827][T14983] debugfs: File '14982' in directory 'proc' already present! 08:32:28 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 08:32:28 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 330.282358][T14983] binder_alloc: 14982: binder_alloc_buf, no vma [ 330.341249][T14983] debugfs: File '14982' in directory 'proc' already present! 08:32:28 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c4600000000000000000000000003000300000000000000000038000092bc62000000000000000020fbd473c534c670adf4aa03ed50b7cc351fa0d7f01c5e179851483e53a73571995f6b14294897031ee36a19cbbb77d8040757913dbbfac3f91eff48fc09c2e6f186d93f86244a0ee4ef70b0848ebbe5afca8e56a906e7344e990d48e040d3485c1bb940bc502d0cf4b98dd146bed4f5cc678e67132f24e7ebb8"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:28 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(0x0, 0x0, 0x0) [ 330.398330][ T25] binder: unexpected work type, 4, not freed [ 330.411758][T15002] debugfs: File '15000' in directory 'proc' already present! 08:32:28 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 330.456284][T15003] debugfs: File '15001' in directory 'proc' already present! 08:32:28 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) 08:32:28 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) 08:32:28 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000e25102c9979bc16914cfea6cfacbe3b00"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 330.644520][T15017] debugfs: File '15013' in directory 'proc' already present! [ 330.679458][T15022] debugfs: File '15018' in directory 'proc' already present! 08:32:28 executing program 0: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000380)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x1, 0x0) chown(0x0, 0x0, 0x0) [ 330.732265][ T25] binder: unexpected work type, 4, not freed [ 330.738783][T15022] binder: 15018:15022 ioctl c018620c 0 returned -14 [ 330.739831][T15017] debugfs: File '15013' in directory 'proc' already present! [ 330.772130][T15026] debugfs: File '15023' in directory 'proc' already present! 08:32:28 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 330.781505][ T3016] binder: unexpected work type, 4, not freed 08:32:28 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, 0x0) [ 330.843030][T15026] binder: 15023:15026 ioctl c0306201 0 returned -14 08:32:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:29 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 330.972094][T15040] debugfs: File '15036' in directory 'proc' already present! [ 330.996477][T15040] binder: 15036:15040 ioctl c018620c 0 returned -14 08:32:29 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) vmsplice(r0, &(0x7f0000000040)=[{0x0}], 0x1, 0xf) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) r3 = socket(0x13, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000000080)=0x80000000, 0x4) listen(r2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004004, &(0x7f0000000040)={0xa, 0x20004e22, 0x0, @loopback}, 0x1c) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000200)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "d44eb8c7308ec7c4", "442065238929350ade91900b51fc9534", "6bdda720", "7ee51430da3f51b3"}, 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xffffffffffffffc1, 0x0, 0x0, 0x1201000000003618) r4 = accept(r1, 0x0, 0x0) recvmsg(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000001c0)=[{0x0}], 0x1, &(0x7f0000000380)=""/4096, 0x1000}, 0x120) ioctl$sock_inet6_udp_SIOCOUTQ(r4, 0x5411, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x10) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r5, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) 08:32:29 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) write$P9_RWRITE(r1, &(0x7f0000000080)={0xb, 0x77, 0x2, 0xf0}, 0xb) [ 331.026927][T15044] debugfs: File '15042' in directory 'proc' already present! 08:32:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 331.084257][T15044] binder_alloc: 15042: binder_alloc_buf, no vma [ 331.118372][T15044] debugfs: File '15042' in directory 'proc' already present! 08:32:29 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 331.146332][T15050] debugfs: File '15048' in directory 'proc' already present! 08:32:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 331.241106][T15050] binder: 15048:15050 ioctl c0306201 0 returned -14 [ 331.279718][T15062] debugfs: File '15060' in directory 'proc' already present! 08:32:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:29 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0) [ 331.301605][T15062] binder: 15060:15062 ioctl c018620c 20000080 returned -1 [ 331.322912][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 331.380516][T15069] debugfs: File '15066' in directory 'proc' already present! [ 331.416066][ T3016] binder: unexpected work type, 4, not freed 08:32:29 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:32:29 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [{0x20, 'wlan1\\.('}, {0x20, ']'}, {}], 0xa, "3894f39c13562713147323838622b8656d9e8859f0e2e49554f26a84876dd52d52bd7069cda1334fba0c83efa10d64968a3dac18da209f2ef7b9e2182f571ccd4f0cfd1711f4d47bd7b53d632217d8eec9f3f8f3969313bd63f4252640d33b4415baa210e39c44fb94338b"}, 0x82) [ 331.426083][T15069] debugfs: File '15066' in directory 'proc' already present! [ 331.440138][ T3016] binder: unexpected work type, 4, not freed 08:32:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 331.507897][T15082] debugfs: File '15077' in directory 'proc' already present! [ 331.518767][ T24] audit: type=1400 audit(1563784349.528:60): avc: denied { map } for pid=15054 comm="syz-executor.0" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=46162 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:hugetlbfs_t:s0 tclass=file permissive=1 [ 331.550566][T15082] binder: 15077:15082 ioctl c0306201 0 returned -14 08:32:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:29 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0}) [ 331.573451][T15085] debugfs: File '15084' in directory 'proc' already present! [ 331.679022][T15096] debugfs: File '15094' in directory 'proc' already present! [ 331.752705][T15096] debugfs: File '15094' in directory 'proc' already present! [ 331.766804][T15102] debugfs: File '15099' in directory 'proc' already present! 08:32:29 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:29 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:29 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = dup2(r0, r0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f0000000100)=0x4) setsockopt$inet_dccp_int(r2, 0x21, 0xf, &(0x7f0000000040), 0x43a) lsetxattr(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)=@random={'user.', '\x00'}, &(0x7f0000000200)='\x00', 0x1, 0x2) 08:32:29 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 08:32:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:29 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0}) [ 331.990388][T15119] debugfs: File '15117' in directory 'proc' already present! [ 332.011247][T15121] debugfs: File '15115' in directory 'proc' already present! 08:32:30 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 332.054532][T15121] binder_alloc: 15115: binder_alloc_buf, no vma [ 332.060635][T15119] binder: 15117:15119 ioctl c018620c 20000080 returned -1 [ 332.071060][T15125] debugfs: File '15124' in directory 'proc' already present! 08:32:30 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) recvmmsg(r0, &(0x7f0000002880)=[{{&(0x7f0000000040)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000100)=""/189, 0xbd}, {&(0x7f00000001c0)=""/213, 0xd5}, {&(0x7f0000000300)}, {&(0x7f0000000340)=""/12, 0xc}], 0x4, &(0x7f00000003c0)=""/125, 0x7d}, 0x4}, {{&(0x7f0000000440)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000004c0)=""/14, 0xe}], 0x1, &(0x7f0000000540)=""/4096, 0x1000}, 0x1}, {{&(0x7f0000001540)=@hci, 0x80, &(0x7f0000001840)=[{&(0x7f00000015c0)=""/197, 0xc5}, {&(0x7f00000016c0)=""/20, 0x14}, {&(0x7f0000001700)=""/188, 0xbc}, {&(0x7f00000017c0)=""/103, 0x67}], 0x4, &(0x7f0000001880)=""/4096, 0x1000}, 0x6}], 0x3, 0x40000002, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000002980)='TIPC\x00') readahead(r1, 0x7, 0xffff) sendmsg$TIPC_CMD_GET_LINKS(r1, &(0x7f0000002a40)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x24, r2, 0x100, 0x70bd2c, 0x25dfdbff, {{}, 0x0, 0x4, 0x0, {0x8}}, ["", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20000001}, 0x40) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x82000, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000002a80)=0x240) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000000000003800000000000000001100000000200000000000000000"], 0x2b) timerfd_create(0x8, 0x80000) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:30 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x300, 0x0, 0x0, 0x0, 0x0}) 08:32:30 executing program 1: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc018620c, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480), 0x0, 0x0, 0x0}) [ 332.150942][ T25] binder: unexpected work type, 4, not freed [ 332.158766][T15121] debugfs: File '15115' in directory 'proc' already present! [ 332.210818][ T25] binder: unexpected work type, 4, not freed 08:32:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 332.264031][ T24] audit: type=1400 audit(1563784350.278:61): avc: denied { wake_alarm } for pid=15132 comm="syz-executor.5" capability=35 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 08:32:30 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 332.374297][T15142] debugfs: File '15139' in directory 'proc' already present! [ 332.403601][T15145] debugfs: File '15143' in directory 'proc' already present! [ 332.419881][T15142] binder: 15139:15142 ioctl c018620c 20000080 returned -22 [ 332.502078][T15145] binder_alloc: 15143: binder_alloc_buf, no vma [ 332.548989][ T25] binder: unexpected work type, 4, not freed [ 332.562720][T15145] debugfs: File '15143' in directory 'proc' already present! [ 332.577718][ T25] binder: unexpected work type, 4, not freed 08:32:30 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:30 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x9, 0x40) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x7}}, 0x20) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000240)='/dev/full\x00', 0x400000, 0x0) ioctl$VT_WAITACTIVE(r3, 0x5607) write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000180)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x4, r2, 0x1c, 0x1, @in6={0xa, 0x4e20, 0x7, @ipv4={[], [], @broadcast}, 0x3ff}}}, 0xa0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c4605000000000000000000000003000300001f17c0f6efa3058300000000000000000000ae000020"], 0x2b) socket$inet_smc(0x2b, 0x1, 0x0) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:30 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000480), 0x0, 0x0, 0x0}) 08:32:30 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:30 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000180)=0x1ff, 0x4) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x0, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @loopback}, 0x10) recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000003ac0)=""/4096, 0xd400}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) futex(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, 0x0, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r2, &(0x7f0000000300)={0xa, 0x4e20}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x2000020000006, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r3, 0x6, 0x19, &(0x7f00000000c0)=0x6, 0x4) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x8000) 08:32:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 332.842482][T15163] debugfs: File '15162' in directory 'proc' already present! [ 332.851990][T15165] debugfs: File '15158' in directory 'proc' already present! [ 332.867118][T15160] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 08:32:30 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:30 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000480), 0x0, 0x0, 0x0}) [ 332.906754][T15165] binder_alloc: 15158: binder_alloc_buf, no vma 08:32:31 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00'/10, 0x1) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) write$binfmt_elf32(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="7f454c460010000002000000000000000300030000000000000000003800000024f4000000000000000020210c6b057373c01759445140112086567cc583199ee90d14bd3097d2964dd8630594651b5295e05ce83a771d846621ae9de31b72b1dd43bcde9b0fe0c468ab27610d44b3c0adbd82486f98dc1dad7a50a9b588287ed3cd3ac1079f"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 332.965188][T15165] debugfs: File '15158' in directory 'proc' already present! 08:32:31 executing program 1: msgctl$IPC_INFO(0x0, 0x3, &(0x7f0000000080)=""/4096) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)=ANY=[@ANYBLOB="14bc42000000000000000000000800000900de56b5000000008008020500c314141b080003010800050f01"], 0x1}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="04462019d9476a25"], 0x1}}, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000002c0)="b8010000000f01c166b8e2000f00d8b9800000c00f3235004000000f304a0fc75f20c44379608d00000100f22e0f01ca67440ff6143f66ba4000b846c95182ef0f01cf400f01df", 0x47}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 08:32:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 333.113762][T15184] debugfs: File '15180' in directory 'proc' already present! 08:32:31 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 333.227801][T15191] debugfs: File '15188' in directory 'proc' already present! [ 333.281949][T15191] binder_alloc: 15188: binder_alloc_buf, no vma [ 333.302875][ T3016] binder: unexpected work type, 4, not freed [ 333.311250][T15191] debugfs: File '15188' in directory 'proc' already present! [ 333.339256][T15198] binder: BINDER_SET_CONTEXT_MGR already set [ 333.345563][T15198] binder: 15188:15198 ioctl 40046207 0 returned -16 08:32:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:31 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x0, 0x300, &(0x7f0000000480), 0x0, 0x0, 0x0}) 08:32:31 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) fcntl$notify(r0, 0x402, 0x20) 08:32:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:31 executing program 1: clone(0x7fb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mount$9p_tcp(&(0x7f0000000000)='\n27.0.0.1\x00', &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080)='9p\x00', 0x0, 0x0) 08:32:31 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 333.620730][T15212] debugfs: File '15210' in directory 'proc' already present! [ 333.647820][T15215] debugfs: File '15213' in directory 'proc' already present! 08:32:31 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 333.665230][T15212] binder_alloc: 15210: binder_alloc_buf, no vma [ 333.676872][T15211] 9pnet_virtio: no channels available for device [ 333.676872][T15211] 27.0.0.1 [ 333.701831][ T3016] binder: unexpected work type, 4, not freed [ 333.709273][T15212] debugfs: File '15210' in directory 'proc' already present! 08:32:31 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) io_setup(0x86, &(0x7f0000000040)=0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x101240) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r4 = eventfd(0x8) io_submit(r1, 0x3, &(0x7f0000000440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x7, 0x10001, r0, &(0x7f0000000100)="96ada04a18c8e0e74081f27b3b18eae86934476cc8fc9421a5f2c27886b4a6793539e6bddc4031b3d672c034a4dfdd745ae230ff25f0bcd0dbe9004a48c07a703ff715f8bde391fd1f8ad412bb279fa69406c5d94ee91615dafb0f6e4b314bf3c7bd20b989aa81d438ef654e61e15bfe60c5505d5c5d537e4db7d840a909c7356b111df6a98c9d8318292b15e5e47f0b09c7569fa358ffe5934a9029187dbb40d41eb656fc5355b00fc07f9051570a3d957a0687a8714794e31890cb7910b4ee2ae5bf8ec06fdd972c15", 0xca, 0x3ff, 0x0, 0x0, r2}, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x94, r0, &(0x7f0000000240)="985626078721e0d8043e91e0cc55848a86013053", 0x14, 0x10001, 0x0, 0x0, r3}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x5, 0x9, r0, &(0x7f0000000340)="58702005719cb8539c4067372390a1598a3db39d1d6710f83d2c7a45bf7608dfd9b4b276b31177e07839cc299d777b01561ea1ef3ab0dd2ead6618c7090c621eedc4702d45ffa6e8aed5e08ffd73e01f73d085dd70cd6e65036733246d23e21fe1c1bc19eea4e70b8fa21ace714f4689311ac98e932e59b233e89adaa841cc2048351d8280d6ca4fcfc6f9", 0x8b, 0x9, 0x0, 0x1, r4}]) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 333.728186][ T3016] binder: unexpected work type, 4, not freed 08:32:31 executing program 2: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x44, 0x300, &(0x7f0000000480)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 333.770668][T15228] 9pnet_virtio: no channels available for device [ 333.770668][T15228] 27.0.0.1 08:32:31 executing program 1: getcwd(&(0x7f0000000ac0)=""/4096, 0x1000) 08:32:32 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) [ 333.923558][T15235] debugfs: File '15234' in directory 'proc' already present! [ 333.943369][T15239] debugfs: File '15233' in directory 'proc' already present! [ 333.986340][T15235] binder_alloc: 15234: binder_alloc_buf, no vma [ 334.066444][T15235] debugfs: File '15234' in directory 'proc' already present! [ 334.118233][T15249] binder_alloc: 15234: binder_alloc_buf, no vma 08:32:32 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:32 executing program 2: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="cd80"], 0x2}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90048b1769bddd3186c76a", @ANYBLOB="e6c55c5d9eba2ee4"], 0x0, 0x13}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 08:32:32 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = msgget$private(0x0, 0x0) msgctl$IPC_RMID(r0, 0x0) 08:32:32 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) 08:32:32 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x7fffffff, 0x4040) ioctl$VIDIOC_S_MODULATOR(r1, 0x40445637, &(0x7f0000000100)={0x7f, "05f9687aa853636d5125345fc49fd2611f7c447d8715ccd4a085c2c1da506531", 0x1000, 0x0, 0xf5, 0x8, 0x4}) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 334.363668][T15264] debugfs: File '15255' in directory 'proc' already present! 08:32:32 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) 08:32:32 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = accept4$x25(0xffffffffffffff9c, &(0x7f0000000040), &(0x7f0000000080)=0x12, 0x800) getpeername(r1, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x80) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x3) sendmmsg$inet(r1, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001940)="a5b74325f4900180add55fa056c0604f681902218d2caea28c46112d59161fb7ad49a51f0e8e35bccd828c5ae2581cb68c97dd8861a8999cd733184c7c8ca9138ad4fd6b344e4ac18311b2051e3e70f48aa3f23a8243fc591c1683267408124e52cd3b78e71aea4d8e0a4143b727fb72caae99ab144482fce2ee516df04b5ad133fba6ed4b8bd344784168814e2dfbd245884315ae6d3ab3917fd63fc40df0844246c026d6934c6e0c0ea9eca6daa6446161e7af3a2e9d09cb2213e94fd8a226135878c300f448f2dd", 0xc9}], 0x1}}], 0x1, 0x0) sendmsg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)="d55bd3c1bb30ff7cfd86b673", 0xc}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080)=0xda9, 0x4) sendto$inet(r1, &(0x7f0000000100)="59941f04f7cd83961b2ca50151cbdf30a98d0eba2a2cec92c0df31058d0c403485c846ae4aa15853342db24aaefe17415a7509694e8008e34aa25b4fa25f173a487ce803efe7af3de5e8f011c0f5457ed701e257a35227361f32e0e6", 0x5c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0xcc, 0x0, 0x27) [ 334.408989][T15264] binder_alloc: 15255: binder_alloc_buf, no vma 08:32:32 executing program 1: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="cd80"], 0x2}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="90048b1769bddd3186", @ANYBLOB="e6c55c5d9eba2e"], 0x0, 0x10}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 334.476166][ T25] binder: unexpected work type, 4, not freed [ 334.484027][T15264] debugfs: File '15255' in directory 'proc' already present! 08:32:32 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 334.561592][ T25] binder: unexpected work type, 4, not freed 08:32:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 334.749430][T15294] debugfs: File '15293' in directory 'proc' already present! [ 334.778127][T15294] binder_alloc: 15293: binder_alloc_buf, no vma [ 334.835218][ T25] binder: unexpected work type, 4, not freed [ 334.843145][T15294] debugfs: File '15293' in directory 'proc' already present! [ 334.896435][ T25] binder: unexpected work type, 4, not freed 08:32:33 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) 08:32:33 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:33 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x30b000, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000080)={0xfff, 0x7, 0x8, 0x0, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000140)={r2, @in={{0x2, 0x4e24, @empty}}}, 0x84) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000002940)={0x0, @dev, @loopback}, &(0x7f0000002980)=0xc) sendmmsg$inet(r0, &(0x7f0000002a40)=[{{&(0x7f0000000280)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x28}}, 0xe, &(0x7f00000013c0)=[{&(0x7f0000000300)="6062dbd3bd67948d302e9f06223cdd6565e08d3d650f5d3f077e5d7f41262ed092c9a8797d1551954575468ea67d0ebd132a7c5ba9783b28e3b5c45c63c9daca267bd367", 0x44}, {&(0x7f0000000380)="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", 0x1000}, {&(0x7f0000001380)}], 0x3}}, {{&(0x7f0000001400)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000001500)=[{&(0x7f0000001440)}, {&(0x7f0000001480)="dc85e9a4992c1beb6881d40613aa3db51c40d2cd3743cadb541dd7f966dc0f7af0bd0daa", 0x24}, {&(0x7f00000014c0)="e2819212", 0x4}], 0x3, &(0x7f00000029c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x80}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @loopback, @local}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x81}}], 0x50}}], 0x2, 0x80) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000001380)='/proc/thread-self/attr/current\x00', 0x2, 0x0) set_mempolicy(0x1, &(0x7f0000000200)=0x484f, 0x7) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000240)) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 335.095413][T15307] debugfs: File '15303' in directory 'proc' already present! [ 335.124146][T15307] binder_alloc: 15303: binder_alloc_buf, no vma 08:32:33 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 335.142067][ T25] binder: unexpected work type, 4, not freed [ 335.159853][T15312] IPVS: ftp: loaded support on port[0] = 21 [ 335.162530][T15307] debugfs: File '15303' in directory 'proc' already present! [ 335.205368][ T25] binder: unexpected work type, 4, not freed 08:32:33 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:33 executing program 5: r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000200)=0x1ff) r1 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x101040, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x1000, 0x0, 0x5, 'queue0\x00', 0x1}) ioctl$BLKALIGNOFF(r2, 0x127a, &(0x7f00000001c0)) openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x1, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 335.354641][T15326] IPVS: ftp: loaded support on port[0] = 21 [ 335.373234][T15332] debugfs: File '15324' in directory 'proc' already present! [ 335.433308][T15332] binder_alloc: 15324: binder_alloc_buf, no vma [ 335.478587][ T25] binder: unexpected work type, 4, not freed [ 335.494628][T15332] debugfs: File '15324' in directory 'proc' already present! [ 335.506171][ T25] binder: unexpected work type, 4, not freed 08:32:35 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:35 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:35 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:35 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x4000, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000100)=""/246) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$SIOCRSSL2CALL(r1, 0x89e2, &(0x7f0000000080)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}) 08:32:35 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) [ 337.679628][T15351] debugfs: File '15349' in directory 'proc' already present! [ 337.709330][T15351] binder_alloc: 15349: binder_alloc_buf, no vma [ 337.717379][ T25] binder: unexpected work type, 4, not freed 08:32:35 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 337.733525][T15351] debugfs: File '15349' in directory 'proc' already present! [ 337.759634][T15361] IPVS: ftp: loaded support on port[0] = 21 [ 337.826232][T15355] IPVS: ftp: loaded support on port[0] = 21 08:32:35 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfffffffffffffff7, 0x20000) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x2400, 0x0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:35 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:35 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 337.900996][ T12] binder: unexpected work type, 4, not freed [ 338.058140][T15373] debugfs: File '15369' in directory 'proc' already present! 08:32:36 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:36 executing program 5: r0 = socket$packet(0x11, 0x3, 0x300) r1 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300030000000000f5ff0000380000000000000000000000000020e33697fdf04bad35955dfa1df4e093fdcdfe00f800000000000000"], 0x2b) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000000c0)=0x0) ptrace$setsig(0x4203, r2, 0x1000, &(0x7f0000000100)={0x3e, 0x5795e679, 0x3}) [ 338.161378][T15373] binder_alloc: 15369: binder_alloc_buf, no vma [ 338.217234][ T12] binder: unexpected work type, 4, not freed [ 338.233603][T15373] debugfs: File '15369' in directory 'proc' already present! 08:32:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) [ 338.295977][T15383] binder_alloc: 15369: binder_alloc_buf, no vma 08:32:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:36 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:36 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) [ 338.503201][T15392] debugfs: File '15391' in directory 'proc' already present! [ 338.514171][T15394] IPVS: ftp: loaded support on port[0] = 21 08:32:36 executing program 5: r0 = memfd_create(&(0x7f0000000040)='\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f1f908ce6b59201002cf0c4dded019b0000000000000500000000030000000000000000003800"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 338.576984][T15392] debugfs: File '15391' in directory 'proc' already present! 08:32:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 338.704888][T15407] IPVS: ftp: loaded support on port[0] = 21 08:32:36 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 338.776019][T15412] debugfs: File '15411' in directory 'proc' already present! 08:32:36 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c460000000000000000000000000300034a3a16b70000000000380000000000006afb1837b554bdb9"], 0x2b) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, &(0x7f0000000240)=0xdac, 0x4) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000380)) r1 = accept$ax25(0xffffffffffffffff, &(0x7f0000000300)={{}, [@bcast, @bcast, @remote, @netrom, @netrom, @default]}, &(0x7f0000000280)=0x48) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000200), &(0x7f0000000480)=0xc) mount$9p_unix(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x240800, &(0x7f0000000140)={'trans=unix,', {[{@debug={'debug', 0x3d, 0x8}}, {@access_client='access=client'}, {@uname={'uname', 0x3d, '\x00'}}, {@nodevmap='nodevmap'}], [{@dont_appraise='dont_appraise'}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x77, 0x31, 0x61, 0x61, 0x3b, 0x77, 0x75], 0x2d, [0x31, 0x35, 0x39, 0x31], 0x2d, [0x76, 0x65, 0x77, 0x34], 0x2d, [0x34, 0x0, 0x77, 0x38], 0x2d, [0x77, 0x3b, 0x39, 0x7f, 0x63, 0x0, 0x31, 0x31]}}}]}}) prctl$PR_SET_PDEATHSIG(0x1, 0x3) openat$autofs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/autofs\x00', 0x208000, 0x0) [ 338.858863][T15412] binder_alloc: 15411: binder_alloc_buf, no vma [ 338.882960][T15412] debugfs: File '15411' in directory 'proc' already present! [ 338.922278][ T25] binder: unexpected work type, 4, not freed 08:32:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:37 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) [ 339.102672][T15429] debugfs: File '15426' in directory 'proc' already present! [ 339.125716][T15429] binder_alloc: 15426: binder_alloc_buf, no vma [ 339.161908][ T25] binder: unexpected work type, 4, not freed [ 339.182577][T15429] debugfs: File '15426' in directory 'proc' already present! 08:32:37 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB="7f454c46000000000000002000000000030003000000000000000000380000000000000000fd000000002027d4d1e216d0b6974c8cd2b092d72d34a1b88f8a1e591e5f77ba410d6614ed43c1ab6ff5475ebae3b7383fdded7c14c5c221dd63fc042608a0bee3ccb8b26fa8e15c042e"], 0x2b) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x40) ioctl$VIDIOC_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000100)={0x0, @reserved}) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 339.225400][ T25] binder: unexpected work type, 4, not freed 08:32:37 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 339.377274][T15444] IPVS: ftp: loaded support on port[0] = 21 [ 339.398468][T15447] IPVS: ftp: loaded support on port[0] = 21 08:32:37 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 339.482466][T15451] debugfs: File '15445' in directory 'proc' already present! 08:32:37 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 339.579153][T15451] debugfs: File '15445' in directory 'proc' already present! 08:32:37 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[], 0x0) splice(r0, &(0x7f0000000040), r0, &(0x7f0000000080), 0x10001, 0x2) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 08:32:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) dup2(r0, 0xffffffffffffffff) 08:32:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:37 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 339.811500][T15473] debugfs: File '15472' in directory 'proc' already present! [ 339.852033][T15473] binder_alloc: 15472: binder_alloc_buf, no vma [ 339.905103][ T12] binder: unexpected work type, 4, not freed [ 339.912695][T15473] debugfs: File '15472' in directory 'proc' already present! [ 339.963731][T15480] binder: BINDER_SET_CONTEXT_MGR already set [ 339.970046][T15480] binder: 15472:15480 ioctl 40046207 0 returned -16 [ 339.991645][ T12] binder: unexpected work type, 4, not freed 08:32:38 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x12000, 0x0) write$P9_RLERROR(r1, &(0x7f0000000080)={0x1e, 0x7, 0x1, {0x15, '%cpusetvboxnet0user.^'}}, 0x1e) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) [ 340.017808][T15486] IPVS: ftp: loaded support on port[0] = 21 [ 340.035647][T15487] IPVS: ftp: loaded support on port[0] = 21 08:32:38 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:38 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f0000000080)=ANY=[], 0x329) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) finit_module(r0, &(0x7f0000000040)='em1ppp1self&%%vmnet1\x00', 0x2) [ 340.275776][T15501] debugfs: File '15500' in directory 'proc' already present! [ 340.302991][T15501] binder_alloc: 15500: binder_alloc_buf, no vma 08:32:38 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, 0xffffffffffffffff) [ 340.323828][ T12] binder: unexpected work type, 4, not freed [ 340.338007][T15501] debugfs: File '15500' in directory 'proc' already present! [ 340.382323][ T12] binder: unexpected work type, 4, not freed 08:32:38 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) dup2(r0, 0xffffffffffffffff) 08:32:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:38 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, 0xffffffffffffffff) 08:32:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:38 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = socket$pptp(0x18, 0x1, 0x2) r2 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x2, 0x9}) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000080)=r2, 0x4) [ 340.658947][T15522] IPVS: ftp: loaded support on port[0] = 21 [ 340.670279][T15517] debugfs: File '15516' in directory 'proc' already present! 08:32:38 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, 0xffffffffffffffff) [ 340.781781][T15517] debugfs: File '15516' in directory 'proc' already present! [ 340.818473][T15534] IPVS: ftp: loaded support on port[0] = 21 08:32:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:39 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 340.978642][T15542] debugfs: File '15540' in directory 'proc' already present! 08:32:39 executing program 5: r0 = memfd_create(&(0x7f0000000080)='\x00', 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030003000000000000000000380000000000000000000000000020"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000240)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@local}}, &(0x7f0000000340)=0xe8) setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000040)=0xa393, 0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000380)={@loopback, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @mcast2, 0x9, 0x8, 0xffff, 0x400, 0x1, 0x110000, r2}) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000180), &(0x7f00000001c0)=0x40) readlink(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)=""/122, 0xffffffffffffff24) [ 341.045347][T15542] debugfs: File '15540' in directory 'proc' already present! 08:32:39 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(arc4)\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="8b", 0x1) recvmmsg(r1, &(0x7f0000006100)=[{{&(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x5d, &(0x7f0000000300), 0x0, &(0x7f0000000340)=""/120, 0x6f}}], 0x400000000000914, 0x0, 0x0) 08:32:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, &(0x7f0000000100)) dup2(r0, 0xffffffffffffffff) [ 341.256451][T15551] QAT: Invalid ioctl [ 341.348487][T15558] QAT: Invalid ioctl [ 341.392027][T15560] IPVS: ftp: loaded support on port[0] = 21 08:32:39 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:39 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:39 executing program 5: r0 = memfd_create(&(0x7f00000002c0)='\x00'/10, 0x0) write$binfmt_elf32(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="7f454c46000000030003000000000000000000f30000000000000000000000fb2dff0ddd2cbcb050ce9914"], 0x2b) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r1 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x9df, 0x80080) ioctl$VT_GETSTATE(r1, 0x5603, &(0x7f0000000080)={0x5, 0x8, 0x3}) 08:32:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='sched\x00') preadv(r0, &(0x7f0000000640)=[{&(0x7f0000000200)=""/250, 0x29c}], 0x191, 0x2000) [ 341.560330][T15572] debugfs: File '15566' in directory 'proc' already present! 08:32:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'ifb0\x00', 0x2}) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000040)={'veth0_to_bridge\x00', @remote}) [ 341.607587][T15572] binder_alloc: 15566: binder_alloc_buf, no vma [ 341.647732][T15572] debugfs: File '15566' in directory 'proc' already present! 08:32:39 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) write$USERIO_CMD_SEND_INTERRUPT(r2, 0x0, 0x0) r3 = accept(r1, 0x0, 0x0) dup2(r0, r3) 08:32:39 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) r1 = syz_open_pts(r0, 0x0) semget$private(0x0, 0x0, 0x400) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r2, &(0x7f00000003c0)=@caif=@dgm={0x25, 0x24f}, 0x80) openat$dir(0xffffffffffffff9c, 0x0, 0x4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') preadv(r3, &(0x7f0000000480), 0x2d1, 0x400000) ioctl$TCSETS(r1, 0x5402, &(0x7f0000000040)={0x0, 0x0, 0x10000000}) [ 341.842236][T15589] debugfs: File '15588' in directory 'proc' already present! 08:32:39 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x0) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f00000001c0)=""/33) 08:32:40 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 341.956689][T15589] debugfs: File '15588' in directory 'proc' already present! [ 341.994689][ T12] binder: unexpected work type, 4, not freed [ 342.058077][T15601] IPVS: ftp: loaded support on port[0] = 21 08:32:40 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:40 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000001c0)={0x200, 0x0, 0x0, 'queue0\x00'}) 08:32:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000001740)=[{{}, 0x4, 0x4}], 0x18) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/159) [ 342.541985][T15621] debugfs: File '15619' in directory 'proc' already present! 08:32:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:40 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 342.592388][T15621] binder_alloc: 15619: binder_alloc_buf, no vma [ 342.600765][ T12] binder: unexpected work type, 4, not freed [ 342.608048][T15621] debugfs: File '15619' in directory 'proc' already present! [ 342.618483][ T12] binder: unexpected work type, 4, not freed [ 342.634849][T15629] IPVS: ftp: loaded support on port[0] = 21 08:32:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:40 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000001740)=[{{}, 0x4, 0x4}], 0x18) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/159) 08:32:40 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) 08:32:40 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 342.911495][T15644] debugfs: File '15639' in directory 'proc' already present! [ 342.960428][T15644] binder_alloc: 15639: binder_alloc_buf, no vma [ 343.006028][ T25] binder: unexpected work type, 4, not freed [ 343.022405][ T25] binder: unexpected work type, 4, not freed 08:32:41 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:41 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) 08:32:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:41 executing program 5: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x20, 0x101002) write$evdev(0xffffffffffffffff, &(0x7f0000001740)=[{{}, 0x4, 0x4}], 0x18) write$evdev(r0, &(0x7f0000000000)=[{{0x0, 0x7530}}], 0xfe72) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000100)=""/159) [ 343.420165][T15664] debugfs: File '15658' in directory 'proc' already present! [ 343.467727][T15672] IPVS: ftp: loaded support on port[0] = 21 [ 343.475068][T15664] binder_alloc: 15658: binder_alloc_buf, no vma 08:32:41 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:41 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) [ 343.516233][T15664] debugfs: File '15658' in directory 'proc' already present! 08:32:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:41 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)) ioctl$TCSETS(r0, 0x40045431, 0x0) syz_open_pts(r0, 0x0) semget$private(0x0, 0x0, 0x400) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) connect(0xffffffffffffffff, 0x0, 0x0) openat$dir(0xffffffffffffff9c, 0x0, 0x4, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') preadv(r1, &(0x7f0000000480), 0x2d1, 0x0) 08:32:41 executing program 4: fallocate(0xffffffffffffffff, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) [ 343.760770][T15691] debugfs: File '15688' in directory 'proc' already present! [ 343.857105][T15691] binder_alloc: 15688: binder_alloc_buf, no vma [ 343.893556][T15698] IPVS: ftp: loaded support on port[0] = 21 [ 343.923022][T15691] debugfs: File '15688' in directory 'proc' already present! 08:32:42 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:42 executing program 4: fallocate(0xffffffffffffffff, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) 08:32:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) sched_setscheduler(0x0, 0x3, &(0x7f00000000c0)=0x6d90) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) semget$private(0x0, 0x0, 0x400) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r1, &(0x7f00000003c0)=@caif=@dgm={0x25, 0x24f, 0xb576}, 0x80) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @multicast2}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0xffffffffba4cc0dd, &(0x7f0000000040)='lo\x00', 0x0, 0x0, 0x5}) openat$dir(0xffffffffffffff9c, 0x0, 0x4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) select(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x7, 0xfffffffffffffeff, 0x0, 0x100000000, 0x8, 0x8, 0xae6, 0x6}, &(0x7f0000000300)) r2 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') preadv(r2, &(0x7f0000000480), 0x2d1, 0x400000) [ 344.232879][T15711] debugfs: File '15709' in directory 'proc' already present! 08:32:42 executing program 4: fallocate(0xffffffffffffffff, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) [ 344.277082][T15711] binder_alloc: 15709: binder_alloc_buf, no vma [ 344.336033][T15719] IPVS: ftp: loaded support on port[0] = 21 08:32:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 344.430113][T15711] debugfs: File '15709' in directory 'proc' already present! [ 344.441102][ T3524] binder: unexpected work type, 4, not freed [ 344.447159][ T3524] binder: unexpected work type, 4, not freed 08:32:42 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:42 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') socket$inet_udplite(0x2, 0x2, 0x88) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:42 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:42 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r1, 0x3, &(0x7f00000000c0)=0x6d90) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) semget$private(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r2, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @multicast2}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0xffffffffba4cc0dd, &(0x7f0000000040)='lo\x00', 0x0, 0x0, 0x5}) openat$dir(0xffffffffffffff9c, 0x0, 0x4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) select(0x0, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0xbbc2, 0x40, 0xfffffffffffffff7}, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x100000000, 0x0, 0x8, 0xae6, 0x6}, &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') preadv(r3, &(0x7f0000000480), 0x2d1, 0x400000) [ 344.724094][T15738] debugfs: File '15737' in directory 'proc' already present! [ 344.784099][T15738] binder_alloc: 15737: binder_alloc_buf, no vma [ 344.824337][T15738] debugfs: File '15737' in directory 'proc' already present! 08:32:43 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:43 executing program 4: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 345.075749][T15755] debugfs: File '15754' in directory 'proc' already present! [ 345.086314][T15755] binder_alloc: 15754: binder_alloc_buf, no vma [ 345.094967][ T3524] binder: unexpected work type, 4, not freed [ 345.102942][T15755] debugfs: File '15754' in directory 'proc' already present! [ 345.114891][ T3524] binder: unexpected work type, 4, not freed 08:32:43 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) sched_setscheduler(r1, 0x3, &(0x7f00000000c0)=0x6d90) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47}) semget$private(0x0, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) connect(r2, 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x40047438, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x0, @multicast1}, {0x2, 0x4e23, @multicast2}, {0x2, 0x0, @empty}, 0x0, 0x0, 0x0, 0x0, 0xffffffffba4cc0dd, &(0x7f0000000040)='lo\x00', 0x0, 0x0, 0x5}) openat$dir(0xffffffffffffff9c, 0x0, 0x4, 0x2) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) select(0x0, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x0, 0x0, 0x0, 0xbbc2, 0x40, 0xfffffffffffffff7}, &(0x7f00000002c0)={0x7, 0x0, 0x0, 0x100000000, 0x0, 0x8, 0xae6, 0x6}, &(0x7f0000000300)) r3 = syz_open_procfs(0x0, &(0x7f0000000380)='net/igmp\x00') preadv(r3, &(0x7f0000000480), 0x2d1, 0x400000) 08:32:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:43 executing program 4: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 345.237816][T15767] debugfs: File '15766' in directory 'proc' already present! 08:32:43 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 345.313994][T15767] binder_alloc: 15766: binder_alloc_buf, no vma 08:32:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) flock(0xffffffffffffffff, 0x8) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 345.354225][T15767] debugfs: File '15766' in directory 'proc' already present! 08:32:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:43 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:43 executing program 0: recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) [ 345.581696][T15788] debugfs: File '15786' in directory 'proc' already present! [ 345.613025][T15788] binder_alloc: 15786: binder_alloc_buf, no vma 08:32:43 executing program 4: r0 = signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:43 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r1, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100)="59941f04f7cd83961b2ca50151cbdf30a98d0eba2a2cec92c0df31058d0c403485c846ae4aa15853342db24aaefe17415a7509694e8008e34aa25b4fa25f173a487ce803efe7af3de5e8f011c0f5457ed701e257a35227361f32e0e6", 0x5c, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f00000012c0)="20268a927f1f6588b967481241ba7860f46ef65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf9221a7511bf746bec66ba", 0xfe6a, 0xcc, 0x0, 0x27) [ 345.647470][ T12] binder: unexpected work type, 4, not freed [ 345.654877][T15788] debugfs: File '15786' in directory 'proc' already present! 08:32:43 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 345.754965][T15795] binder: BINDER_SET_CONTEXT_MGR already set [ 345.761234][T15795] binder: 15786:15795 ioctl 40046207 0 returned -16 08:32:43 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:43 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:43 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:44 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 345.984646][T15807] IPVS: ftp: loaded support on port[0] = 21 [ 346.044818][T15810] debugfs: File '15809' in directory 'proc' already present! 08:32:44 executing program 5: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000300)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x6, 0x20000801, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESDEC], 0x335) shutdown(r0, 0x1) 08:32:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:44 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 346.264431][T15831] debugfs: File '15830' in directory 'proc' already present! 08:32:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:44 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 346.323081][T15831] binder_alloc: 15830: binder_alloc_buf, no vma 08:32:44 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 346.366849][T15831] debugfs: File '15830' in directory 'proc' already present! 08:32:44 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:44 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:44 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 346.618391][T15857] IPVS: ftp: loaded support on port[0] = 21 [ 346.633353][T15859] debugfs: File '15854' in directory 'proc' already present! 08:32:44 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000), 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 346.699397][T15859] binder_alloc: 15854: binder_alloc_buf, no vma 08:32:44 executing program 0: r0 = socket$inet6(0xa, 0x0, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 346.852258][T15868] IPVS: ftp: loaded support on port[0] = 21 [ 346.891970][T15859] debugfs: File '15854' in directory 'proc' already present! 08:32:44 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 346.944637][T15877] IPVS: ftp: loaded support on port[0] = 21 08:32:45 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x0) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:45 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 347.152358][T15893] IPVS: ftp: loaded support on port[0] = 21 [ 347.167287][T15894] debugfs: File '15890' in directory 'proc' already present! 08:32:45 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 347.199839][T15894] binder_alloc: 15890: binder_alloc_buf, no vma [ 347.207519][ T3524] binder: unexpected work type, 4, not freed [ 347.226085][T15894] debugfs: File '15890' in directory 'proc' already present! [ 347.227354][ T3524] binder: unexpected work type, 4, not freed 08:32:45 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x0) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 347.520045][T15912] debugfs: File '15908' in directory 'proc' already present! [ 347.532606][T15912] binder_alloc: 15908: binder_alloc_buf, no vma [ 347.608288][ T12] binder: unexpected work type, 4, not freed [ 347.615604][T15912] debugfs: File '15908' in directory 'proc' already present! [ 347.616184][T15912] binder: BINDER_SET_CONTEXT_MGR already set [ 347.629260][T15912] binder: 15908:15912 ioctl 40046207 0 returned -16 08:32:46 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:46 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:46 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:46 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x0) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 348.985958][T15925] debugfs: File '15923' in directory 'proc' already present! [ 349.050535][T15935] IPVS: ftp: loaded support on port[0] = 21 [ 349.069875][T15925] binder_alloc: 15923: binder_alloc_buf, no vma 08:32:47 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(0xffffffffffffffff, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) 08:32:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x0) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 349.171950][ T3016] binder: unexpected work type, 4, not freed [ 349.179311][T15925] debugfs: File '15923' in directory 'proc' already present! [ 349.193960][ T3016] binder: unexpected work type, 4, not freed 08:32:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 349.493992][T15944] IPVS: ftp: loaded support on port[0] = 21 [ 349.522849][T15961] IPVS: ftp: loaded support on port[0] = 21 [ 349.600484][T15965] debugfs: File '15963' in directory 'proc' already present! [ 349.627877][T15965] binder_alloc: 15963: binder_alloc_buf, no vma [ 349.634983][ T3016] binder: unexpected work type, 4, not freed [ 349.679016][T15965] debugfs: File '15963' in directory 'proc' already present! [ 349.701246][ T3016] binder: unexpected work type, 4, not freed 08:32:47 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:47 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(0xffffffffffffffff, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) 08:32:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:47 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:47 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:47 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:47 executing program 4: signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(0xffffffffffffffff, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r0, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r1, r0) [ 349.868535][T15981] debugfs: File '15979' in directory 'proc' already present! 08:32:47 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 349.931014][T15981] binder_alloc: 15979: binder_alloc_buf, no vma [ 349.955043][T15981] debugfs: File '15979' in directory 'proc' already present! [ 349.999055][T15988] IPVS: ftp: loaded support on port[0] = 21 08:32:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:48 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:48 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x0, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 350.207399][T16000] debugfs: File '15999' in directory 'proc' already present! 08:32:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 350.282505][T16000] binder_alloc: 15999: binder_alloc_buf, no vma 08:32:48 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 350.362335][T16000] debugfs: File '15999' in directory 'proc' already present! [ 350.368838][T16007] binder_alloc: 15999: binder_alloc_buf, no vma 08:32:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x0, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:48 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x0, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 350.663746][T16005] IPVS: ftp: loaded support on port[0] = 21 [ 350.699707][T16022] IPVS: ftp: loaded support on port[0] = 21 08:32:48 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:48 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:48 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 350.808764][T16027] debugfs: File '16025' in directory 'proc' already present! [ 350.898843][T16027] binder_alloc: 16025: binder_alloc_buf, no vma 08:32:49 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x0, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 350.980328][T16027] debugfs: File '16025' in directory 'proc' already present! [ 350.997900][T16030] binder_alloc: 16025: binder_alloc_buf, no vma 08:32:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:49 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:49 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, 0x0) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 351.328959][T16046] debugfs: File '16042' in directory 'proc' already present! 08:32:49 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x0, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 351.395953][T16046] binder_alloc: 16042: binder_alloc_buf, no vma 08:32:49 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 351.459426][T16046] debugfs: File '16042' in directory 'proc' already present! [ 351.499266][T16055] IPVS: ftp: loaded support on port[0] = 21 08:32:49 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 351.707393][T16065] debugfs: File '16064' in directory 'proc' already present! [ 351.753530][T16065] binder_alloc: 16064: binder_alloc_buf, no vma [ 351.786441][ T3016] binder: unexpected work type, 4, not freed [ 351.809194][T16065] debugfs: File '16064' in directory 'proc' already present! [ 351.844620][ T3016] binder: unexpected work type, 4, not freed [ 351.940505][T16056] IPVS: ftp: loaded support on port[0] = 21 08:32:50 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(0xffffffffffffffff, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:50 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x0, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 352.257542][T16082] debugfs: File '16075' in directory 'proc' already present! [ 352.282799][T16082] binder_alloc: 16075: binder_alloc_buf, no vma [ 352.343596][ T3016] binder: unexpected work type, 4, not freed [ 352.350141][T16082] debugfs: File '16075' in directory 'proc' already present! 08:32:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)) preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 352.390237][T16082] binder: BINDER_SET_CONTEXT_MGR already set [ 352.396296][T16082] binder: 16075:16082 ioctl 40046207 0 returned -16 [ 352.406581][T16089] IPVS: ftp: loaded support on port[0] = 21 08:32:50 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:50 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x0, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:50 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 352.722617][T16108] debugfs: File '16105' in directory 'proc' already present! [ 352.861778][T16108] binder_alloc: 16105: binder_alloc_buf, no vma [ 352.902878][T16108] debugfs: File '16105' in directory 'proc' already present! [ 352.920795][T16121] IPVS: ftp: loaded support on port[0] = 21 08:32:51 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:51 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:51 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 353.276958][T16134] debugfs: File '16132' in directory 'proc' already present! 08:32:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0b") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:51 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 353.375753][T16133] IPVS: ftp: loaded support on port[0] = 21 [ 353.408778][ T3524] binder: unexpected work type, 4, not freed [ 353.415733][T16134] debugfs: File '16132' in directory 'proc' already present! 08:32:51 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:51 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 353.722640][T16138] IPVS: ftp: loaded support on port[0] = 21 [ 353.928079][T16161] debugfs: File '16158' in directory 'proc' already present! [ 353.980263][ T3016] binder: unexpected work type, 4, not freed [ 353.992672][T16161] debugfs: File '16158' in directory 'proc' already present! 08:32:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:52 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:52 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 354.338193][T16175] debugfs: File '16172' in directory 'proc' already present! 08:32:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47b") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:52 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 354.481145][T16175] debugfs: File '16172' in directory 'proc' already present! [ 354.505727][ T3016] binder: unexpected work type, 4, not freed 08:32:52 executing program 5: socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000019c0)='bpf\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) lstat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='.', 0x0, 0x0, 0x0) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, 0x7080, 0x0) mount(&(0x7f0000000080), &(0x7f0000000200)='./file0\x00', 0x0, 0x5010, 0x0) clone(0x200100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) unshare(0x0) clone(0x70024103, 0x0, 0x0, 0x0, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f00000003c0)={{}, {0x1, 0x7}, [{0x2, 0x4, r0}, {0x2, 0x6, r0}, {0x2, 0x0, r0}, {0x2, 0x4, r0}, {0x2, 0x1, r0}, {0x2, 0x7}, {0x2, 0x5, r0}, {0x2, 0x1, r0}], {0x4, 0x7dc1bebd50932a41}, [{}, {0x8, 0x1, r1}], {0x10, 0x5}}, 0x74, 0x2) 08:32:52 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:52 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:52 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 354.752318][T16186] IPVS: ftp: loaded support on port[0] = 21 [ 354.896249][T16196] debugfs: File '16194' in directory 'proc' already present! 08:32:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 354.988948][T16196] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 354.988956][T16196] binder_alloc: 16194: binder_alloc_buf, no vma [ 355.133827][T16196] debugfs: File '16194' in directory 'proc' already present! 08:32:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(0x0, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 355.361064][T16208] IPVS: ftp: loaded support on port[0] = 21 08:32:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:53 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:53 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf0") preadv(r0, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(0x0, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 355.650831][T16217] debugfs: File '16216' in directory 'proc' already present! 08:32:53 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:53 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f00000001c0)='./file1\x00', 0xc042, 0x0) mknod(&(0x7f0000000300)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010a) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000180)='./file1\x00', 0x0, 0x0) clone(0x20028000, 0x0, 0x0, 0x0, 0x0) 08:32:53 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:53 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:53 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(0x0, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 355.998355][T16240] debugfs: File '16239' in directory 'proc' already present! [ 356.072892][T16240] binder_alloc: 16239: binder_alloc_buf, no vma [ 356.101742][T16234] IPVS: ftp: loaded support on port[0] = 21 08:32:54 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) [ 356.122830][T16240] debugfs: File '16239' in directory 'proc' already present! 08:32:54 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040), &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:54 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000002c0)=""/169, 0xa9}], 0x1, 0x0) 08:32:54 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) [ 356.682274][T16267] debugfs: File '16265' in directory 'proc' already present! [ 356.701702][T16267] binder_alloc: 16265: binder_alloc_buf, no vma 08:32:54 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x200010c) close(r0) execve(&(0x7f0000000100)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) creat(&(0x7f00000000c0)='./file1\x00', 0x1b) setsockopt$inet6_tcp_int(r1, 0x6, 0x200800000000013, &(0x7f0000000280)=0x400100000001, 0xc6) connect$inet6(r1, &(0x7f0000000080), 0x1c) r2 = dup2(r1, r1) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000440), 0x131f64) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3103101ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000002c0)='./file1\x00', 0x0, 0x0) setsockopt$inet_buf(r2, 0x0, 0x0, 0x0, 0x0) [ 356.741947][ T3524] binder: unexpected work type, 4, not freed [ 356.749223][T16267] debugfs: File '16265' in directory 'proc' already present! 08:32:54 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, 0x0, 0x0, 0x0) [ 356.819267][T16267] binder: BINDER_SET_CONTEXT_MGR already set [ 356.825449][T16267] binder: 16265:16267 ioctl 40046207 0 returned -16 [ 356.825455][ T3524] binder: unexpected work type, 4, not freed 08:32:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:55 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040), &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 357.147898][T16290] debugfs: File '16288' in directory 'proc' already present! 08:32:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, 0x0, 0x0, 0x0) 08:32:55 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040), &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 357.211311][T16290] binder_alloc: 16288: binder_alloc_buf, no vma [ 357.243961][T16290] debugfs: File '16288' in directory 'proc' already present! 08:32:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 357.347383][T16299] IPVS: ftp: loaded support on port[0] = 21 [ 357.476151][T16307] debugfs: File '16304' in directory 'proc' already present! 08:32:55 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, 0x0, 0x0, 0x0) 08:32:55 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:55 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 357.664259][T16307] binder_alloc: 16304: binder_alloc_buf, no vma [ 357.684150][T16307] debugfs: File '16304' in directory 'proc' already present! [ 357.796344][T16323] IPVS: ftp: loaded support on port[0] = 21 08:32:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000), 0x0, 0x0) 08:32:56 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:56 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000000)=0x80800008) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)) r2 = syz_open_pts(r0, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) 08:32:56 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 358.017762][T16330] debugfs: File '16329' in directory 'proc' already present! 08:32:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 358.091037][T16330] binder_alloc: 16329: binder_alloc_buf, no vma [ 358.129528][ T3016] binder: unexpected work type, 4, not freed 08:32:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000), 0x0, 0x0) [ 358.139208][T16330] debugfs: File '16329' in directory 'proc' already present! 08:32:56 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 358.297777][T16351] IPVS: ftp: loaded support on port[0] = 21 08:32:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:32:56 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:56 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000), 0x0, 0x0) [ 358.577650][T16360] debugfs: File '16356' in directory 'proc' already present! [ 358.626274][T16360] binder_alloc: 16356: binder_alloc_buf, no vma [ 358.656894][ T3016] binder: unexpected work type, 4, not freed [ 358.672825][T16360] debugfs: File '16356' in directory 'proc' already present! 08:32:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 358.705889][ T3016] binder: unexpected work type, 4, not freed [ 358.930832][T16373] IPVS: ftp: loaded support on port[0] = 21 08:32:57 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:57 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) 08:32:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 359.212199][T16380] debugfs: File '16378' in directory 'proc' already present! 08:32:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:32:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 359.255299][T16380] binder_alloc: 16378: binder_alloc_buf, no vma 08:32:57 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 359.320392][ T3016] binder: unexpected work type, 4, not freed [ 359.328195][T16380] debugfs: File '16378' in directory 'proc' already present! 08:32:57 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 359.372701][ T3016] binder: unexpected work type, 4, not freed 08:32:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 359.560118][T16401] IPVS: ftp: loaded support on port[0] = 21 08:32:57 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/sockstat6\x00') r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000100)="11dca50d5e0bcfe47bf070") preadv(r0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0) [ 359.690242][T16406] debugfs: File '16405' in directory 'proc' already present! [ 359.707958][T16406] binder_alloc: 16405: binder_alloc_buf, no vma 08:32:57 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 359.743761][ T3524] binder: unexpected work type, 4, not freed [ 359.751695][T16406] debugfs: File '16405' in directory 'proc' already present! [ 359.759304][ T3524] binder: unexpected work type, 4, not freed 08:32:58 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) 08:32:58 executing program 5: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:32:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:58 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:58 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 360.347934][T16421] debugfs: File '16419' in directory 'proc' already present! [ 360.400280][T16429] debugfs: File '16418' in directory 'proc' already present! [ 360.419771][ T3016] binder: unexpected work type, 4, not freed [ 360.430854][T16421] binder: BINDER_SET_CONTEXT_MGR already set [ 360.434775][T16429] debugfs: File '16418' in directory 'proc' already present! 08:32:58 executing program 5: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:32:58 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 360.436873][T16421] binder: 16419:16421 ioctl 40046207 0 returned -16 [ 360.461456][T16432] IPVS: ftp: loaded support on port[0] = 21 [ 360.544656][T16421] debugfs: File '16419' in directory 'proc' already present! [ 360.559469][ T3016] binder: unexpected work type, 4, not freed [ 360.565721][ T3016] binder: unexpected work type, 4, not freed 08:32:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:32:58 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") r1 = socket$inet(0x2, 0x3, 0x19) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x5, &(0x7f0000000140)=0x1, 0x4) 08:32:58 executing program 5: ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:32:58 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 360.891418][T16453] debugfs: File '16450' in directory 'proc' already present! 08:32:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r1) 08:32:59 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 360.939259][T16454] IPVS: ftp: loaded support on port[0] = 21 [ 360.943268][T16453] binder_alloc: 16450: binder_alloc_buf, no vma [ 360.988107][T16453] debugfs: File '16450' in directory 'proc' already present! 08:32:59 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:59 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:32:59 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:32:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:59 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:59 executing program 5: r0 = syz_open_dev$video4linux(0x0, 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 361.407834][T16478] debugfs: File '16471' in directory 'proc' already present! [ 361.484181][T16478] binder_alloc: 16471: binder_alloc_buf, no vma [ 361.575199][T16478] debugfs: File '16471' in directory 'proc' already present! 08:32:59 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:32:59 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x0, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vhost-vsock\x00', 0x2, 0x0) close(r1) 08:32:59 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:32:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:32:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 361.740319][T16495] debugfs: File '16494' in directory 'proc' already present! [ 361.777687][T16495] binder_alloc: 16494: binder_alloc_buf, no vma [ 361.835545][ T3016] binder: unexpected work type, 4, not freed [ 361.861365][T16495] debugfs: File '16494' in directory 'proc' already present! [ 361.868992][ T17] binder: unexpected work type, 4, not freed 08:32:59 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:33:00 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 361.962173][T16503] IPVS: ftp: loaded support on port[0] = 21 08:33:00 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:33:00 executing program 1: 08:33:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:00 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:33:00 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 362.399723][T16531] debugfs: File '16530' in directory 'proc' already present! [ 362.437960][T16531] binder_alloc: 16530: binder_alloc_buf, no vma [ 362.444750][T16513] binder: unexpected work type, 4, not freed [ 362.458075][T16531] debugfs: File '16530' in directory 'proc' already present! [ 362.469063][T16513] binder: unexpected work type, 4, not freed 08:33:00 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:33:00 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) 08:33:00 executing program 1: 08:33:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:00 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:00 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 362.684138][T16545] debugfs: File '16544' in directory 'proc' already present! [ 362.739530][T16545] binder_alloc: 16544: binder_alloc_buf, no vma 08:33:00 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 362.794136][T16553] IPVS: ftp: loaded support on port[0] = 21 [ 362.835665][T16545] debugfs: File '16544' in directory 'proc' already present! [ 362.900645][T16551] binder_alloc: 16544: binder_alloc_buf, no vma 08:33:01 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:33:01 executing program 1: 08:33:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:01 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x0, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:01 executing program 5: syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5, 0xe7}}) [ 363.244889][T16568] debugfs: File '16565' in directory 'proc' already present! [ 363.256062][T16568] binder_alloc: 16565: binder_alloc_buf, no vma [ 363.263193][T16513] binder: unexpected work type, 4, not freed 08:33:01 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:01 executing program 1: [ 363.289312][T16568] debugfs: File '16565' in directory 'proc' already present! 08:33:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 08:33:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:01 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:01 executing program 1: [ 363.459692][T16582] IPVS: ftp: loaded support on port[0] = 21 08:33:01 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) [ 363.541577][T16590] debugfs: File '16584' in directory 'proc' already present! [ 363.566059][T16590] binder_alloc: 16584: binder_alloc_buf, no vma [ 363.625178][T16590] debugfs: File '16584' in directory 'proc' already present! [ 363.632892][T16513] binder: unexpected work type, 4, not freed [ 363.663327][ T17] binder: unexpected work type, 4, not freed 08:33:02 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:33:02 executing program 1: 08:33:02 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:02 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, 0x0) 08:33:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:02 executing program 1: [ 364.166375][T16609] debugfs: File '16607' in directory 'proc' already present! [ 364.186672][T16609] binder_alloc: 16607: binder_alloc_buf, no vma [ 364.201569][T16513] binder: unexpected work type, 4, not freed 08:33:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}) [ 364.211546][T16609] debugfs: File '16607' in directory 'proc' already present! [ 364.235287][T16615] IPVS: ftp: loaded support on port[0] = 21 08:33:02 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 364.265475][T16612] binder: BINDER_SET_CONTEXT_MGR already set [ 364.271851][T16612] binder: 16607:16612 ioctl 40046207 0 returned -16 [ 364.271921][T16513] binder: unexpected work type, 4, not freed 08:33:02 executing program 1: 08:33:02 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}) 08:33:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 364.579161][T16634] debugfs: File '16631' in directory 'proc' already present! [ 364.619051][T16634] binder_alloc: 16631: binder_alloc_buf, no vma [ 364.659476][T16513] binder: unexpected work type, 4, not freed [ 364.677055][T16634] debugfs: File '16631' in directory 'proc' already present! [ 364.692484][T15917] binder: unexpected work type, 4, not freed 08:33:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7}}) 08:33:03 executing program 1: 08:33:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 08:33:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc), 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:03 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 365.095661][T16648] debugfs: File '16643' in directory 'proc' already present! 08:33:03 executing program 1: [ 365.148507][T16651] IPVS: ftp: loaded support on port[0] = 21 [ 365.174066][T15917] binder: unexpected work type, 4, not freed [ 365.181634][T16648] debugfs: File '16643' in directory 'proc' already present! 08:33:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}}) 08:33:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc), 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 365.245956][T15917] binder: unexpected work type, 4, not freed 08:33:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:03 executing program 1: 08:33:03 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:03 executing program 1: 08:33:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}}) [ 365.623939][T16671] debugfs: File '16666' in directory 'proc' already present! [ 365.743024][T16679] IPVS: ftp: loaded support on port[0] = 21 [ 365.762354][T16671] debugfs: File '16666' in directory 'proc' already present! 08:33:03 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 08:33:03 executing program 1: 08:33:03 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000000)='/dev/v4l-subdev#\x00', 0x390, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5}}) 08:33:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:03 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc), 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:03 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:04 executing program 1: [ 366.023529][T16703] debugfs: File '16701' in directory 'proc' already present! [ 366.051726][T16703] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 366.051735][T16703] binder_alloc: 16701: binder_alloc_buf, no vma 08:33:04 executing program 5: [ 366.071370][T16693] binder: unexpected work type, 4, not freed [ 366.089049][T16711] IPVS: ftp: loaded support on port[0] = 21 [ 366.117598][T16703] debugfs: File '16701' in directory 'proc' already present! [ 366.128061][T16693] binder: unexpected work type, 4, not freed 08:33:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:04 executing program 5: 08:33:04 executing program 1: 08:33:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 366.380731][T16727] debugfs: File '16726' in directory 'proc' already present! [ 366.421293][T16727] binder_alloc: 16726: binder_alloc_buf, no vma [ 366.439534][T16693] binder: unexpected work type, 4, not freed [ 366.448235][T16727] debugfs: File '16726' in directory 'proc' already present! [ 366.469866][T16730] binder: BINDER_SET_CONTEXT_MGR already set [ 366.476213][T16730] binder: 16726:16730 ioctl 40046207 0 returned -16 [ 366.500800][T16693] binder: unexpected work type, 4, not freed 08:33:04 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 08:33:04 executing program 5: 08:33:04 executing program 1: 08:33:04 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:04 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:04 executing program 5: [ 366.938107][T16740] debugfs: File '16737' in directory 'proc' already present! [ 366.967197][T16740] binder_alloc: 16737: binder_alloc_buf, no vma 08:33:05 executing program 1: [ 367.006941][T16747] IPVS: ftp: loaded support on port[0] = 21 [ 367.061504][T16513] binder: unexpected work type, 4, not freed [ 367.069187][T16740] debugfs: File '16737' in directory 'proc' already present! 08:33:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:05 executing program 5: [ 367.117281][T16513] binder: unexpected work type, 4, not freed 08:33:05 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getrandom(&(0x7f00000000c0)=""/27, 0x1b, 0x2) 08:33:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 367.496708][T16769] IPVS: ftp: loaded support on port[0] = 21 08:33:05 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(0xffffffffffffffff, &(0x7f00000092c0), 0x4ff, 0x0) 08:33:05 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:05 executing program 5: chown(0x0, 0x0, 0x0) clone(0x802102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) mkdir(&(0x7f0000000240)='./file0\x00', 0x1c0) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='security.selinux\x00', &(0x7f0000000040)='system_u:object_r:netlabel_mgmt_exec_t:s0-', 0x12, 0x0) 08:33:05 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getrandom(&(0x7f00000000c0)=""/27, 0x1b, 0x2) 08:33:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:05 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 367.823206][T16777] debugfs: File '16772' in directory 'proc' already present! [ 367.824457][T16779] SELinux: Context system_u:object_r: is not valid (left unmapped). [ 367.850464][T16777] binder_alloc: 16772: binder_alloc_buf, no vma 08:33:05 executing program 1: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="11dca50d5e0bcfe47bf070") getrandom(&(0x7f00000000c0)=""/27, 0x1b, 0x2) 08:33:05 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 367.889773][T16785] IPVS: ftp: loaded support on port[0] = 21 [ 367.902305][T16693] binder: unexpected work type, 4, not freed [ 367.911182][T16777] debugfs: File '16772' in directory 'proc' already present! [ 367.968654][T16787] binder: BINDER_SET_CONTEXT_MGR already set [ 367.974938][T16787] binder: 16772:16787 ioctl 40046207 0 returned -16 08:33:06 executing program 5: clone(0x7fc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="d3d2b93c38f19c0400cd8034"], 0xc}}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="eabe9f303b222957eecbc624877c825255f910c28f5e87a64820546a1e", @ANYRESHEX, @ANYBLOB="90048b1769bddd3186c76aea56c2a39727b975d7979bdfb49f6e68dadd7b0b35cf6453007a00b16543b6e9ccb93d85dd781d19eb72e7bbacb4560a5823951cb40cc14611739c58ba8588ba1a998a9783497cbda850350a256800bed304bb6e9f1cfd72128ff9231a20d0e85f10079c9ae44972f3d1f22a5d0ffd5b219b6a5f7886b0426a0a380fb348c855b3cde1b993a2a8cae28497d0b248ceb129d19aec1dc053a8bda0860af042edee3e859122b6fc1e692ead7b6eea087d23b6583c6adaca4c75", @ANYRESOCT, @ANYRES64, @ANYRESHEX], 0x0, 0x123}, 0x20) tkill(r0, 0x3b) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) [ 368.023503][T16513] binder: unexpected work type, 4, not freed 08:33:06 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x0, 0x0, 0x0, 0x0, 0x0) socket$unix(0x1, 0x3, 0x0) 08:33:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 368.287678][T16814] debugfs: File '16810' in directory 'proc' already present! [ 368.344748][T16814] binder_alloc: 16810: binder_alloc_buf, no vma [ 368.381769][T16814] debugfs: File '16810' in directory 'proc' already present! [ 368.399806][T16815] debugfs: Directory '16815-5' with parent 'kvm' already present! 08:33:06 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, 0x0, 0x0, 0x0) 08:33:06 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:06 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:06 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c64, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0800a1695e0bcfe87b0071") r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x3}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x10000000002f, &(0x7f0000000080), 0x282) [ 368.816273][T16829] debugfs: File '16824' in directory 'proc' already present! [ 368.861204][T16829] binder_alloc: 16824: binder_alloc_buf, no vma [ 368.884421][T16693] binder: unexpected work type, 4, not freed [ 368.893548][T16835] IPVS: ftp: loaded support on port[0] = 21 [ 368.898901][T16829] debugfs: File '16824' in directory 'proc' already present! 08:33:06 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:07 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clone(0x1100108, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$KVM_DEASSIGN_PCI_DEVICE(r1, 0x4040ae72, &(0x7f00000000c0)) 08:33:07 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 368.959504][T16836] binder_alloc: 16824: binder_alloc_buf, no vma [ 368.967390][T16829] binder: BINDER_SET_CONTEXT_MGR already set [ 368.973684][T16829] binder: 16824:16829 ioctl 40046207 0 returned -16 [ 369.170181][T16850] debugfs: File '16847' in directory 'proc' already present! [ 369.196301][T16850] binder_alloc: 16847: binder_alloc_buf, no vma [ 369.233411][T16693] binder: unexpected work type, 4, not freed [ 369.248198][T16850] debugfs: File '16847' in directory 'proc' already present! 08:33:09 executing program 5: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r0, 0x0, 0x420000a77, 0x0) write$binfmt_elf64(r3, &(0x7f0000000000)=ANY=[], 0xfffffd88) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) close(r1) 08:33:09 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 08:33:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:09 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:09 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, 0x0, 0x0, 0x0) [ 371.220734][T16869] debugfs: File '16865' in directory 'proc' already present! 08:33:09 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:09 executing program 1: perf_event_open(&(0x7f0000000580)={0x2, 0x70, 0x5c65, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/protocols\x00') readv(r0, &(0x7f0000000300)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) [ 371.266016][T16869] binder_alloc: 16865: binder_alloc_buf, no vma [ 371.284563][T16873] IPVS: ftp: loaded support on port[0] = 21 [ 371.298292][T16693] binder: unexpected work type, 4, not freed [ 371.305766][T16869] debugfs: File '16865' in directory 'proc' already present! 08:33:09 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 371.388022][T16513] binder: unexpected work type, 4, not freed 08:33:09 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:09 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:09 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340), 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 371.578449][T16890] debugfs: File '16889' in directory 'proc' already present! [ 371.615446][T16890] binder_alloc: 16889: binder_alloc_buf, no vma [ 371.631954][T16693] binder: unexpected work type, 4, not freed [ 371.641866][T16890] debugfs: File '16889' in directory 'proc' already present! [ 371.665038][T16898] IPVS: ftp: loaded support on port[0] = 21 [ 371.677135][T16693] binder: unexpected work type, 4, not freed 08:33:10 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:10 executing program 5: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000600)=[{&(0x7f0000000500)='%', 0x1}], 0x1, 0x0) write$binfmt_script(r1, &(0x7f0000000000)=ANY=[@ANYPTR64], 0x8) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ad56b6cc0400fbab65d8b4ac2ca35c6e", 0x10) sendmsg$FOU_CMD_DEL(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000480)={0x14}, 0x14}}, 0x48004) splice(r0, 0x0, r3, 0x0, 0x80000001, 0x0) 08:33:10 executing program 1: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) write$P9_RLOCK(r1, &(0x7f0000000040)={0x8}, 0x8) setsockopt$inet_tcp_int(r2, 0x6, 0x10000000013, &(0x7f0000000080)=0x1, 0x4) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000100), 0x4) vmsplice(r1, &(0x7f0000002640)=[{&(0x7f00000001c0)="12", 0x1}], 0x1, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) splice(r0, 0x0, r2, 0x0, 0x10005, 0x0) sendto(r2, &(0x7f0000000000)="a1", 0x1, 0x0, 0x0, 0x0) connect$unix(r2, &(0x7f0000000240)=@abs, 0x6e) 08:33:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:10 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x7) recvmmsg(r0, &(0x7f0000000200), 0x38c, 0x0, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000280)={@remote, @multicast2, @multicast1}, 0xc) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1a) sendmmsg(r0, 0x0, 0x0, 0x0) 08:33:10 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 372.109137][T16908] debugfs: File '16906' in directory 'proc' already present! [ 372.145798][T16908] binder_alloc: 16906: binder_alloc_buf, no vma [ 372.164096][T16693] binder: unexpected work type, 4, not freed [ 372.179169][T16917] IPVS: ftp: loaded support on port[0] = 21 [ 372.191469][T16908] debugfs: File '16906' in directory 'proc' already present! [ 372.209060][T16918] binder: BINDER_SET_CONTEXT_MGR already set [ 372.215347][T16918] binder: 16906:16918 ioctl 40046207 0 returned -16 08:33:10 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x36d, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000000330000006031409200823a00fe800000000000000000000000000000ff0200000000000000000000000000010000907800000000fe800000000004000000000000000000efaf3637ebe6e0f016eca4872b378fc92e48c884c1227792"], 0xff23) 08:33:10 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:10 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:10 executing program 5: 08:33:10 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) [ 372.424486][T16934] debugfs: File '16932' in directory 'proc' already present! [ 372.479801][T16934] binder_alloc: 16932: binder_alloc_buf, no vma [ 372.505874][T16937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.513513][T16937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.523744][T16937] 8021q: adding VLAN 0 to HW filter on device team0 08:33:10 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 372.544164][T16943] IPVS: ftp: loaded support on port[0] = 21 [ 372.561418][T16934] debugfs: File '16932' in directory 'proc' already present! 08:33:10 executing program 5: [ 372.591022][T16937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.725007][T16952] debugfs: File '16949' in directory 'proc' already present! 08:33:10 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) 08:33:10 executing program 5: [ 372.782840][T16937] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 372.793865][T16952] binder_alloc: 16949: binder_alloc_buf, no vma [ 372.826695][T16937] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 372.869735][T16952] debugfs: File '16949' in directory 'proc' already present! 08:33:11 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) 08:33:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:11 executing program 1: 08:33:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:11 executing program 0: 08:33:11 executing program 5: 08:33:11 executing program 5: [ 373.165146][T16971] IPVS: ftp: loaded support on port[0] = 21 [ 373.181019][T16969] debugfs: File '16968' in directory 'proc' already present! [ 373.202119][T16969] binder_alloc: 16968: binder_alloc_buf, no vma 08:33:11 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:11 executing program 0: 08:33:11 executing program 1: [ 373.280752][T16513] binder: unexpected work type, 4, not freed [ 373.288445][T16969] debugfs: File '16968' in directory 'proc' already present! [ 373.308922][T16975] binder: BINDER_SET_CONTEXT_MGR already set [ 373.315115][T16975] binder: 16968:16975 ioctl 40046207 0 returned -16 [ 373.323342][T16513] binder: unexpected work type, 4, not freed 08:33:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:11 executing program 5: 08:33:11 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 373.521790][T16987] debugfs: File '16985' in directory 'proc' already present! [ 373.567699][T16987] binder_alloc: 16985: binder_alloc_buf, no vma [ 373.610698][T16513] binder: unexpected work type, 4, not freed [ 373.623488][T16987] debugfs: File '16985' in directory 'proc' already present! 08:33:11 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:11 executing program 0: 08:33:11 executing program 5: 08:33:11 executing program 1: 08:33:11 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:11 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:11 executing program 5: 08:33:11 executing program 0: 08:33:11 executing program 1: [ 373.919480][T17010] debugfs: File '17009' in directory 'proc' already present! [ 373.940113][T17012] IPVS: ftp: loaded support on port[0] = 21 [ 373.967609][T17010] binder_alloc: 17009: binder_alloc_buf, no vma 08:33:12 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:12 executing program 5: 08:33:12 executing program 0: [ 374.023301][T16513] binder: unexpected work type, 4, not freed [ 374.044037][T17010] debugfs: File '17009' in directory 'proc' already present! [ 374.062031][T16995] binder: unexpected work type, 4, not freed 08:33:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, &(0x7f0000000140)='security.selinux\x00', &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:12 executing program 1: 08:33:12 executing program 0: [ 374.291865][T17027] debugfs: File '17026' in directory 'proc' already present! 08:33:12 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:12 executing program 5: [ 374.387695][T17027] binder_alloc: 17026: binder_alloc_buf, no vma [ 374.456680][T17034] IPVS: ftp: loaded support on port[0] = 21 [ 374.466747][T17027] debugfs: File '17026' in directory 'proc' already present! 08:33:12 executing program 0: 08:33:12 executing program 5: 08:33:12 executing program 1: 08:33:12 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:12 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:12 executing program 0: 08:33:12 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:12 executing program 5: 08:33:12 executing program 1: 08:33:12 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) [ 374.781726][T17053] debugfs: File '17051' in directory 'proc' already present! [ 374.839316][T17053] binder_alloc: 17051: binder_alloc_buf, no vma 08:33:12 executing program 5: [ 374.906167][T16995] binder: unexpected work type, 4, not freed [ 374.922522][T16995] binder: unexpected work type, 4, not freed 08:33:13 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:13 executing program 1: 08:33:13 executing program 0: 08:33:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 375.017948][T17067] IPVS: ftp: loaded support on port[0] = 21 08:33:13 executing program 1: 08:33:13 executing program 5: 08:33:13 executing program 0: [ 375.192078][T17079] debugfs: File '17078' in directory 'proc' already present! [ 375.262253][T16995] binder: unexpected work type, 4, not freed [ 375.269765][T17079] debugfs: File '17078' in directory 'proc' already present! 08:33:13 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:13 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, r1) 08:33:13 executing program 1: 08:33:13 executing program 5: 08:33:13 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 375.508138][T17098] debugfs: File '17094' in directory 'proc' already present! 08:33:13 executing program 5: [ 375.550100][T16995] binder: unexpected work type, 4, not freed [ 375.557462][T17098] debugfs: File '17094' in directory 'proc' already present! 08:33:13 executing program 1: 08:33:13 executing program 0: 08:33:13 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4008000, 0x0, 0x0) dup2(r2, r1) [ 375.649755][T17103] binder: BINDER_SET_CONTEXT_MGR already set [ 375.655961][T17103] binder: 17094:17103 ioctl 40046207 0 returned -16 [ 375.736444][T17105] IPVS: ftp: loaded support on port[0] = 21 08:33:13 executing program 1: 08:33:13 executing program 0: 08:33:13 executing program 5: 08:33:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:14 executing program 0: 08:33:14 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4008000, 0x0, 0x0) dup2(r2, r1) 08:33:14 executing program 5: 08:33:14 executing program 1: 08:33:14 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) sendmmsg$inet(r0, &(0x7f0000006340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x44801) [ 376.171805][T17126] debugfs: File '17122' in directory 'proc' already present! [ 376.183913][T16995] binder: unexpected work type, 4, not freed [ 376.225672][T17126] debugfs: File '17122' in directory 'proc' already present! [ 376.280795][T17129] binder: BINDER_SET_CONTEXT_MGR already set [ 376.286881][T17129] binder: 17122:17129 ioctl 40046207 0 returned -16 08:33:14 executing program 0: socket(0xa, 0x20000000001, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) memfd_create(0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x4) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) link(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file0\x00') unshare(0x8000400) r0 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f7, 0xfffffffffffffffd, 0x0) gettid() mq_notify(r0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0) fcntl$setown(0xffffffffffffffff, 0x8, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$PIO_UNIMAPCLR(r1, 0x4b68, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) request_key(&(0x7f0000000200)='blacklist\x00', &(0x7f00000002c0)={'syz', 0x3}, &(0x7f0000000300)='keyring\x006\xf9\x12l\x12\x05O\\\x0e\x18\xc6R%s\xddy\xf1\xa0\xa3\xa6\tW\xd6\xc7)\xad\x85l\xd8\xf0\xdf\x9c\x04\xd1\x8eW\x90K\x1c\x05 \x9d\xee\x12\xf5\xcc\xc1-\x98\xa7\x007g46a\x0f\xaa\xc8\x8b\xcf\x96\x81\x91\x87\x89\xc2\xadG6e\x98K\x17\x86\x8d\x9c^\x90\x81>\x9e\xc1\xf7?\xde\xbfV8\xf9\xc0\x1f\x88!\xf1\xf7\x8e\xba\xc9\x84\xe3\x85.\xe1\x00', 0xffffffffffffffff) clone(0x8000002102001ff8, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) request_key(&(0x7f00000004c0)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) [ 376.376767][T17138] IPVS: ftp: loaded support on port[0] = 21 08:33:14 executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) close(r0) r1 = eventfd2(0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000300)=""/233, 0xe9}], 0x1) read(r0, &(0x7f0000000200)=""/142, 0x8e) write$binfmt_misc(r1, &(0x7f0000000100)={'syz0', "719fb47b"}, 0xfe41) 08:33:14 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, 0x0, 0x0, 0x4008000, 0x0, 0x0) dup2(r2, r1) 08:33:14 executing program 5: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) connect(0xffffffffffffffff, 0x0, 0x0) 08:33:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:14 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:14 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4) dup2(r2, r1) [ 376.738751][T17160] debugfs: File '17156' in directory 'proc' already present! 08:33:14 executing program 0: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000840)=0xd) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x10000261, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp\x00') preadv(r0, &(0x7f0000000480), 0x100000000000022c, 0x0) connect(0xffffffffffffffff, &(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0x0, {0xa, 0x0, 0x2b, @rand_addr="b9ee875b0b3abf40fabbbbf334331930", 0xf95f}}}, 0x3f) 08:33:14 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 376.832167][T17160] debugfs: File '17156' in directory 'proc' already present! [ 376.908963][T17175] IPVS: ftp: loaded support on port[0] = 21 08:33:14 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:15 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4) dup2(r2, r1) 08:33:15 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 377.096999][T17186] debugfs: File '17184' in directory 'proc' already present! [ 377.126859][T17188] IPVS: ftp: loaded support on port[0] = 21 [ 377.157626][T17186] binder_alloc_new_buf_locked: 3 callbacks suppressed [ 377.157633][T17186] binder_alloc: 17184: binder_alloc_buf, no vma 08:33:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 377.238773][T17186] debugfs: File '17184' in directory 'proc' already present! [ 377.239005][T17195] IPVS: ftp: loaded support on port[0] = 21 [ 377.417963][T17203] IPVS: ftp: loaded support on port[0] = 21 08:33:15 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:15 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x0, 0x0, 0xb4) dup2(r2, r1) 08:33:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:15 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:15 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 377.679433][T17213] debugfs: File '17211' in directory 'proc' already present! [ 377.693666][T17213] binder_alloc: 17211: binder_alloc_buf, no vma [ 377.721842][T17217] IPVS: ftp: loaded support on port[0] = 21 [ 377.723762][T16513] binder: unexpected work type, 4, not freed [ 377.756097][T17218] IPVS: ftp: loaded support on port[0] = 21 [ 377.760183][T17213] debugfs: File '17211' in directory 'proc' already present! 08:33:15 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) [ 377.771887][T17219] binder: BINDER_SET_CONTEXT_MGR already set [ 377.777964][T17219] binder: 17211:17219 ioctl 40046207 0 returned -16 [ 377.789768][T16513] binder: unexpected work type, 4, not freed 08:33:15 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 377.858491][T17226] IPVS: ftp: loaded support on port[0] = 21 [ 377.938137][T17230] debugfs: File '17228' in directory 'proc' already present! 08:33:16 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) 08:33:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 377.993206][T17230] binder_alloc: 17228: binder_alloc_buf, no vma [ 378.018480][T16513] binder: unexpected work type, 4, not freed [ 378.028561][T17230] debugfs: File '17228' in directory 'proc' already present! [ 378.049194][T17232] binder: BINDER_SET_CONTEXT_MGR already set [ 378.055406][T17232] binder: 17228:17232 ioctl 40046207 0 returned -16 [ 378.068029][T16513] binder: unexpected work type, 4, not freed 08:33:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 378.153850][T17240] IPVS: ftp: loaded support on port[0] = 21 08:33:16 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(0xffffffffffffffff, r1) [ 378.232453][T17246] debugfs: File '17244' in directory 'proc' already present! [ 378.254263][T17247] IPVS: ftp: loaded support on port[0] = 21 [ 378.258593][T17246] binder_alloc: 17244: binder_alloc_buf, no vma [ 378.273909][T16513] binder: unexpected work type, 4, not freed 08:33:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 378.279547][T17246] debugfs: File '17244' in directory 'proc' already present! 08:33:16 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, 0xffffffffffffffff) [ 378.361762][T17254] debugfs: File '17252' in directory 'proc' already present! [ 378.389840][T17254] binder_alloc: 17252: binder_alloc_buf, no vma [ 378.416254][T16513] binder: unexpected work type, 4, not freed [ 378.427375][T17254] debugfs: File '17252' in directory 'proc' already present! 08:33:16 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:16 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 378.475502][T17254] binder: BINDER_SET_CONTEXT_MGR already set [ 378.481922][T17254] binder: 17252:17254 ioctl 40046207 0 returned -16 08:33:16 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:16 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:16 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, 0xffffffffffffffff) [ 378.665535][T17268] IPVS: ftp: loaded support on port[0] = 21 [ 378.728057][T17270] debugfs: File '17269' in directory 'proc' already present! [ 378.744314][T17271] IPVS: ftp: loaded support on port[0] = 21 08:33:16 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 378.827759][T17270] binder_alloc: 17269: binder_alloc_buf, no vma [ 378.851728][T17270] debugfs: File '17269' in directory 'proc' already present! [ 378.863637][T17279] IPVS: ftp: loaded support on port[0] = 21 [ 378.919801][T17283] binder_alloc: 17269: binder_alloc_buf, no vma 08:33:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 379.018238][T17288] IPVS: ftp: loaded support on port[0] = 21 08:33:17 executing program 4: r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={0x1}, 0x8, 0x80000) fallocate(r0, 0x2, 0x101, 0x80) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000100)={0x0}, 0x10) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) ptrace$getsig(0x4202, 0x0, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000d4effc)=0x1, 0x2af) sendto$inet(r1, 0x0, 0x0, 0x20000000, &(0x7f0000000340)={0x2, 0x4e20}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) getgid() fstat(0xffffffffffffffff, 0x0) write$P9_RSTATu(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000100), 0x1063, 0x4008000, 0x0, 0xb4) dup2(r2, 0xffffffffffffffff) 08:33:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) 08:33:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) [ 379.143510][T17292] debugfs: File '17290' in directory 'proc' already present! [ 379.153278][T17292] binder_alloc: 17290: binder_alloc_buf, no vma [ 379.160435][T16513] binder: unexpected work type, 4, not freed [ 379.167768][T17292] debugfs: File '17290' in directory 'proc' already present! [ 379.178872][T16513] binder: unexpected work type, 4, not freed 08:33:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:17 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:17 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 379.385544][T17304] IPVS: ftp: loaded support on port[0] = 21 [ 379.425741][T17305] IPVS: ftp: loaded support on port[0] = 21 [ 379.434161][T17307] debugfs: File '17306' in directory 'proc' already present! [ 379.526516][T17307] binder_alloc: 17306: binder_alloc_buf, no vma [ 379.577827][T17307] debugfs: File '17306' in directory 'proc' already present! 08:33:17 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 379.622718][T17314] IPVS: ftp: loaded support on port[0] = 21 [ 379.641689][T17316] IPVS: ftp: loaded support on port[0] = 21 08:33:17 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) 08:33:17 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) 08:33:17 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept(r0, 0x0, 0x0) [ 379.866825][T17321] debugfs: File '17319' in directory 'proc' already present! [ 379.932651][T17321] binder_alloc: 17319: binder_alloc_buf, no vma [ 380.016225][T17321] debugfs: File '17319' in directory 'proc' already present! 08:33:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:18 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 380.129902][T17331] IPVS: ftp: loaded support on port[0] = 21 [ 380.146352][T17333] IPVS: ftp: loaded support on port[0] = 21 [ 380.162636][T17334] IPVS: ftp: loaded support on port[0] = 21 08:33:18 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 380.404680][T17342] IPVS: ftp: loaded support on port[0] = 21 [ 380.451220][T17345] debugfs: File '17341' in directory 'proc' already present! [ 380.537540][T17346] IPVS: ftp: loaded support on port[0] = 21 08:33:18 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) 08:33:18 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) 08:33:18 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept(r0, 0x0, 0x0) 08:33:18 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 381.068853][T17363] IPVS: ftp: loaded support on port[0] = 21 [ 381.118177][T17365] IPVS: ftp: loaded support on port[0] = 21 [ 381.146287][T17364] IPVS: ftp: loaded support on port[0] = 21 [ 381.160391][T17366] debugfs: File '17357' in directory 'proc' already present! [ 381.218277][T17366] debugfs: File '17357' in directory 'proc' already present! 08:33:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:19 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 381.474048][T17377] debugfs: File '17375' in directory 'proc' already present! [ 381.486596][T16513] binder: unexpected work type, 4, not freed [ 381.497183][T17377] debugfs: File '17375' in directory 'proc' already present! 08:33:19 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept(r0, 0x0, 0x0) 08:33:19 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 381.529369][T17379] IPVS: ftp: loaded support on port[0] = 21 [ 381.547011][T17377] binder: BINDER_SET_CONTEXT_MGR already set [ 381.553115][T17377] binder: 17375:17377 ioctl 40046207 0 returned -16 [ 381.570895][T17383] IPVS: ftp: loaded support on port[0] = 21 08:33:19 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:19 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 381.825319][T17395] IPVS: ftp: loaded support on port[0] = 21 [ 381.862422][T17392] IPVS: ftp: loaded support on port[0] = 21 08:33:19 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 381.947212][T17399] debugfs: File '17397' in directory 'proc' already present! [ 382.014622][T16513] binder: unexpected work type, 4, not freed [ 382.031624][T17399] debugfs: File '17397' in directory 'proc' already present! [ 382.055312][T16513] binder: unexpected work type, 4, not freed [ 382.147928][T17406] IPVS: ftp: loaded support on port[0] = 21 [ 382.204292][T17407] IPVS: ftp: loaded support on port[0] = 21 08:33:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 382.305948][T17411] debugfs: File '17410' in directory 'proc' already present! [ 382.362425][T17411] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 382.362433][T17411] binder_alloc: 17410: binder_alloc_buf, no vma [ 382.413183][T17411] debugfs: File '17410' in directory 'proc' already present! 08:33:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:20 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:20 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) 08:33:20 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:20 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 382.730544][T17421] debugfs: File '17417' in directory 'proc' already present! [ 382.826218][T17428] IPVS: ftp: loaded support on port[0] = 21 [ 382.842625][T17421] debugfs: File '17417' in directory 'proc' already present! [ 382.880573][T17425] IPVS: ftp: loaded support on port[0] = 21 [ 382.888973][T16687] binder: unexpected work type, 4, not freed [ 382.970366][T17430] IPVS: ftp: loaded support on port[0] = 21 [ 382.992584][T17434] IPVS: ftp: loaded support on port[0] = 21 08:33:21 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 383.280290][T17443] IPVS: ftp: loaded support on port[0] = 21 08:33:21 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 383.448030][T17447] debugfs: File '17445' in directory 'proc' already present! 08:33:21 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 383.667724][T17456] IPVS: ftp: loaded support on port[0] = 21 08:33:21 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:21 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 383.825895][T17463] debugfs: File '17460' in directory 'proc' already present! [ 383.869258][T17463] binder_alloc: 17460: binder_alloc_buf, no vma [ 383.877481][T16687] binder: unexpected work type, 4, not freed [ 383.897539][T17466] IPVS: ftp: loaded support on port[0] = 21 [ 383.911492][T17463] debugfs: File '17460' in directory 'proc' already present! 08:33:21 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) [ 383.921240][T16687] binder: unexpected work type, 4, not freed 08:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 383.991537][T17470] IPVS: ftp: loaded support on port[0] = 21 08:33:22 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 384.180114][T17474] IPVS: ftp: loaded support on port[0] = 21 [ 384.273137][T17478] IPVS: ftp: loaded support on port[0] = 21 [ 384.280315][T17480] debugfs: File '17479' in directory 'proc' already present! [ 384.309730][T17480] binder_alloc: 17479: binder_alloc_buf, no vma 08:33:22 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 384.433633][T16508] binder: unexpected work type, 4, not freed [ 384.470526][T17480] debugfs: File '17479' in directory 'proc' already present! [ 384.516791][T16508] binder: unexpected work type, 4, not freed 08:33:22 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:22 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:22 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 384.884057][T17502] debugfs: File '17501' in directory 'proc' already present! [ 384.947866][T17502] binder_alloc: 17501: binder_alloc_buf, no vma [ 384.971246][T17492] binder: unexpected work type, 4, not freed [ 384.972843][T17503] IPVS: ftp: loaded support on port[0] = 21 [ 384.982123][T17502] debugfs: File '17501' in directory 'proc' already present! 08:33:23 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) dup2(r0, 0xffffffffffffffff) 08:33:23 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 385.040647][T16687] binder: unexpected work type, 4, not freed 08:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 385.199646][T17512] IPVS: ftp: loaded support on port[0] = 21 [ 385.313890][T17514] IPVS: ftp: loaded support on port[0] = 21 08:33:23 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 385.361993][T17518] debugfs: File '17515' in directory 'proc' already present! [ 385.381273][T17518] binder_alloc: 17515: binder_alloc_buf, no vma [ 385.400581][T16687] binder: unexpected work type, 4, not freed [ 385.407753][T17518] debugfs: File '17515' in directory 'proc' already present! [ 385.441143][T17520] binder: BINDER_SET_CONTEXT_MGR already set [ 385.447169][T17520] binder: 17515:17520 ioctl 40046207 0 returned -16 [ 385.450653][T16687] binder: unexpected work type, 4, not freed 08:33:23 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:23 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:23 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 385.898196][T17535] debugfs: File '17532' in directory 'proc' already present! [ 385.945982][T17535] binder_alloc: 17532: binder_alloc_buf, no vma [ 385.961303][T17492] binder: unexpected work type, 4, not freed [ 385.969402][T17535] debugfs: File '17532' in directory 'proc' already present! 08:33:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 386.013968][T17492] binder: unexpected work type, 4, not freed 08:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:24 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 386.264815][T17553] debugfs: File '17549' in directory 'proc' already present! [ 386.285959][T17553] binder_alloc: 17549: binder_alloc_buf, no vma [ 386.297331][T16687] binder: unexpected work type, 4, not freed 08:33:24 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 386.316337][T17553] debugfs: File '17549' in directory 'proc' already present! [ 386.354004][T16687] binder: unexpected work type, 4, not freed [ 386.363704][T17559] IPVS: ftp: loaded support on port[0] = 21 08:33:24 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 386.488074][T17562] IPVS: ftp: loaded support on port[0] = 21 08:33:24 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:24 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 386.715483][T17571] debugfs: File '17569' in directory 'proc' already present! [ 386.809681][T17571] binder_alloc: 17569: binder_alloc_buf, no vma [ 386.892745][T17571] debugfs: File '17569' in directory 'proc' already present! 08:33:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 386.947175][T17578] IPVS: ftp: loaded support on port[0] = 21 08:33:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:25 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 387.205876][T17596] debugfs: File '17593' in directory 'proc' already present! 08:33:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 387.272918][T17596] debugfs: File '17593' in directory 'proc' already present! [ 387.288151][T17600] IPVS: ftp: loaded support on port[0] = 21 [ 387.339240][T17604] IPVS: ftp: loaded support on port[0] = 21 08:33:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 387.463555][T17611] debugfs: File '17610' in directory 'proc' already present! [ 387.479824][T17612] IPVS: ftp: loaded support on port[0] = 21 08:33:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 387.548554][T17611] binder_alloc: 17610: binder_alloc_buf, no vma [ 387.579118][T17611] debugfs: File '17610' in directory 'proc' already present! [ 387.587015][T16687] binder: unexpected work type, 4, not freed 08:33:25 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:25 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 387.617342][T17611] binder: BINDER_SET_CONTEXT_MGR already set [ 387.623599][T17611] binder: 17610:17611 ioctl 40046207 0 returned -16 08:33:25 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:25 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 387.797207][T17627] debugfs: File '17624' in directory 'proc' already present! 08:33:25 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 387.860840][T17627] binder_alloc: 17624: binder_alloc_buf, no vma [ 387.877466][T17631] IPVS: ftp: loaded support on port[0] = 21 [ 387.889625][T17627] debugfs: File '17624' in directory 'proc' already present! [ 387.962618][T17634] IPVS: ftp: loaded support on port[0] = 21 [ 387.980299][T17639] IPVS: ftp: loaded support on port[0] = 21 [ 387.992472][T17492] binder: unexpected work type, 4, not freed 08:33:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:26 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 388.174612][T17648] debugfs: File '17646' in directory 'proc' already present! 08:33:26 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 388.223105][T17648] binder_alloc: 17646: binder_alloc_buf, no vma [ 388.248338][T16687] binder: unexpected work type, 4, not freed [ 388.263128][T17652] IPVS: ftp: loaded support on port[0] = 21 [ 388.271486][T17648] debugfs: File '17646' in directory 'proc' already present! 08:33:26 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 388.315211][T16687] binder: unexpected work type, 4, not freed 08:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 388.408028][T17657] IPVS: ftp: loaded support on port[0] = 21 08:33:26 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 388.559464][T17663] IPVS: ftp: loaded support on port[0] = 21 08:33:26 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 388.626018][T17665] debugfs: File '17664' in directory 'proc' already present! [ 388.635484][T17665] binder_alloc: 17664: binder_alloc_buf, no vma [ 388.642263][T16687] binder: unexpected work type, 4, not freed [ 388.649567][T17665] debugfs: File '17664' in directory 'proc' already present! [ 388.659698][T16687] binder: unexpected work type, 4, not freed 08:33:26 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 388.926797][T17676] IPVS: ftp: loaded support on port[0] = 21 [ 388.943865][T17677] IPVS: ftp: loaded support on port[0] = 21 08:33:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 388.986492][T17681] debugfs: File '17679' in directory 'proc' already present! [ 389.076545][T17681] binder_alloc: 17679: binder_alloc_buf, no vma 08:33:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:27 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 389.150392][T16687] binder: unexpected work type, 4, not freed [ 389.161178][T17681] debugfs: File '17679' in directory 'proc' already present! [ 389.181100][T17689] IPVS: ftp: loaded support on port[0] = 21 [ 389.186101][T17688] binder_alloc: 17679: binder_alloc_buf, no vma 08:33:27 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 389.228530][T17492] binder: unexpected work type, 4, not freed 08:33:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 389.313383][T17694] IPVS: ftp: loaded support on port[0] = 21 [ 389.476206][T17699] IPVS: ftp: loaded support on port[0] = 21 [ 389.502789][T17703] debugfs: File '17702' in directory 'proc' already present! [ 389.535218][T17703] binder_alloc: 17702: binder_alloc_buf, no vma [ 389.573229][T16687] binder: unexpected work type, 4, not freed [ 389.590789][T17703] debugfs: File '17702' in directory 'proc' already present! 08:33:27 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:27 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:27 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 389.833160][T17704] IPVS: ftp: loaded support on port[0] = 21 08:33:27 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 389.952986][T17713] debugfs: File '17709' in directory 'proc' already present! [ 390.034275][T17713] binder_alloc: 17709: binder_alloc_buf, no vma 08:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 390.081317][T17721] IPVS: ftp: loaded support on port[0] = 21 [ 390.095492][T17713] debugfs: File '17709' in directory 'proc' already present! [ 390.096678][T17723] IPVS: ftp: loaded support on port[0] = 21 [ 390.168415][T17725] IPVS: ftp: loaded support on port[0] = 21 [ 390.208623][T17729] debugfs: File '17728' in directory 'proc' already present! [ 390.242333][T17729] binder_alloc: 17728: binder_alloc_buf, no vma 08:33:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 390.301587][T17729] debugfs: File '17728' in directory 'proc' already present! [ 390.309128][T17492] binder: unexpected work type, 4, not freed [ 390.327005][T17492] binder: unexpected work type, 4, not freed 08:33:28 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:28 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 390.497721][T17739] IPVS: ftp: loaded support on port[0] = 21 08:33:28 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 390.546525][T17744] debugfs: File '17743' in directory 'proc' already present! 08:33:28 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 390.611992][T17744] debugfs: File '17743' in directory 'proc' already present! [ 390.645832][T17748] IPVS: ftp: loaded support on port[0] = 21 [ 390.748591][T17755] IPVS: ftp: loaded support on port[0] = 21 08:33:28 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 390.832983][T17756] IPVS: ftp: loaded support on port[0] = 21 [ 390.897580][T17760] debugfs: File '17758' in directory 'proc' already present! 08:33:28 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 390.981146][T17760] binder_alloc: 17758: binder_alloc_buf, no vma 08:33:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 391.066678][T17766] IPVS: ftp: loaded support on port[0] = 21 [ 391.111045][T17492] binder: unexpected work type, 4, not freed [ 391.118561][T17760] debugfs: File '17758' in directory 'proc' already present! 08:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 391.286923][T17775] IPVS: ftp: loaded support on port[0] = 21 [ 391.304006][T17776] IPVS: ftp: loaded support on port[0] = 21 [ 391.415266][T17780] debugfs: File '17778' in directory 'proc' already present! [ 391.427797][T17492] binder: unexpected work type, 4, not freed [ 391.435321][T17780] debugfs: File '17778' in directory 'proc' already present! [ 391.445044][T17492] binder: unexpected work type, 4, not freed 08:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:29 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 391.640991][T17789] debugfs: File '17788' in directory 'proc' already present! 08:33:29 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 391.687644][T17492] binder: unexpected work type, 4, not freed [ 391.696743][T17790] IPVS: ftp: loaded support on port[0] = 21 [ 391.701566][T17789] debugfs: File '17788' in directory 'proc' already present! [ 391.722655][T17492] binder: unexpected work type, 4, not freed 08:33:29 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:29 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:29 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:29 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 391.918392][T17802] IPVS: ftp: loaded support on port[0] = 21 [ 392.005183][T17801] IPVS: ftp: loaded support on port[0] = 21 [ 392.055098][T17803] debugfs: File '17799' in directory 'proc' already present! 08:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 392.120759][T17811] IPVS: ftp: loaded support on port[0] = 21 08:33:30 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 392.270851][T17814] IPVS: ftp: loaded support on port[0] = 21 [ 392.394752][T17821] debugfs: File '17819' in directory 'proc' already present! [ 392.433672][T17822] IPVS: ftp: loaded support on port[0] = 21 08:33:30 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 392.683859][T17821] debugfs: File '17819' in directory 'proc' already present! [ 392.746667][T17828] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 392.746676][T17828] binder_alloc: 17819: binder_alloc_buf, no vma [ 392.788851][T17829] IPVS: ftp: loaded support on port[0] = 21 08:33:30 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:30 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:30 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:31 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(0x0, &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 393.065955][T17836] IPVS: ftp: loaded support on port[0] = 21 [ 393.152757][T17842] debugfs: File '17839' in directory 'proc' already present! [ 393.170196][T17838] IPVS: ftp: loaded support on port[0] = 21 [ 393.250421][T17844] IPVS: ftp: loaded support on port[0] = 21 [ 393.312147][T17848] IPVS: ftp: loaded support on port[0] = 21 [ 393.329207][T17842] binder_alloc: 17839: binder_alloc_buf, no vma [ 393.339858][T17842] debugfs: File '17839' in directory 'proc' already present! 08:33:31 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:31 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 393.682044][T17860] debugfs: File '17858' in directory 'proc' already present! [ 393.744048][T17857] IPVS: ftp: loaded support on port[0] = 21 08:33:31 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:32 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:32 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 394.128537][T16687] binder: unexpected work type, 4, not freed [ 394.158427][T17870] IPVS: ftp: loaded support on port[0] = 21 08:33:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 394.367494][T17877] IPVS: ftp: loaded support on port[0] = 21 [ 394.399263][T17879] debugfs: File '17878' in directory 'proc' already present! [ 394.419054][T17876] IPVS: ftp: loaded support on port[0] = 21 08:33:32 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:32 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 394.459725][T17879] binder_alloc: 17878: binder_alloc_buf, no vma [ 394.552692][T17879] debugfs: File '17878' in directory 'proc' already present! [ 394.571130][T17883] IPVS: ftp: loaded support on port[0] = 21 [ 394.689084][T17886] IPVS: ftp: loaded support on port[0] = 21 08:33:32 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:32 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:33 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 395.071745][T17897] IPVS: ftp: loaded support on port[0] = 21 [ 395.112685][T17899] debugfs: File '17898' in directory 'proc' already present! [ 395.178835][T17899] binder_alloc: 17898: binder_alloc_buf, no vma [ 395.179416][T16687] binder: unexpected work type, 4, not freed [ 395.192542][T17899] debugfs: File '17898' in directory 'proc' already present! [ 395.222774][T17899] binder: BINDER_SET_CONTEXT_MGR already set [ 395.228847][T17899] binder: 17898:17899 ioctl 40046207 0 returned -16 08:33:33 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 395.440492][T17904] IPVS: ftp: loaded support on port[0] = 21 08:33:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 395.612706][T17913] debugfs: File '17912' in directory 'proc' already present! [ 395.622270][T17913] binder_alloc: 17912: binder_alloc_buf, no vma [ 395.629048][T17492] binder: unexpected work type, 4, not freed [ 395.637089][T17913] debugfs: File '17912' in directory 'proc' already present! [ 395.646621][T17492] binder: unexpected work type, 4, not freed 08:33:33 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:33 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 395.666025][T17911] IPVS: ftp: loaded support on port[0] = 21 08:33:33 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 395.921672][T17926] debugfs: File '17923' in directory 'proc' already present! [ 396.008852][T17925] IPVS: ftp: loaded support on port[0] = 21 [ 396.021877][T17926] binder_alloc: 17923: binder_alloc_buf, no vma [ 396.032073][T17492] binder: unexpected work type, 4, not freed [ 396.040051][T17926] debugfs: File '17923' in directory 'proc' already present! [ 396.056645][T17490] binder: unexpected work type, 4, not freed [ 396.074229][T17931] IPVS: ftp: loaded support on port[0] = 21 08:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 396.197632][T17935] debugfs: File '17934' in directory 'proc' already present! [ 396.208356][T17935] binder_alloc: 17934: binder_alloc_buf, no vma [ 396.215917][T17490] binder: unexpected work type, 4, not freed [ 396.223904][T17935] debugfs: File '17934' in directory 'proc' already present! [ 396.234204][T17490] binder: unexpected work type, 4, not freed 08:33:34 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 396.440347][T17941] debugfs: File '17939' in directory 'proc' already present! [ 396.458245][T17941] binder_alloc: 17939: binder_alloc_buf, no vma [ 396.473357][T16687] binder: unexpected work type, 4, not freed [ 396.487770][T17941] debugfs: File '17939' in directory 'proc' already present! [ 396.512718][T16688] binder: unexpected work type, 4, not freed 08:33:36 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:36 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:36 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:36 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:36 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:36 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 398.762764][T17967] debugfs: File '17966' in directory 'proc' already present! [ 398.778458][T17968] IPVS: ftp: loaded support on port[0] = 21 [ 398.799259][T17970] IPVS: ftp: loaded support on port[0] = 21 [ 398.819317][T17972] IPVS: ftp: loaded support on port[0] = 21 [ 398.877472][T17967] binder_alloc: 17966: binder_alloc_buf, no vma [ 398.897787][T17973] IPVS: ftp: loaded support on port[0] = 21 [ 398.954074][T15671] binder: unexpected work type, 4, not freed [ 398.963547][T17967] debugfs: File '17966' in directory 'proc' already present! [ 398.997146][T17969] IPVS: ftp: loaded support on port[0] = 21 08:33:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 399.240773][T17986] debugfs: File '17985' in directory 'proc' already present! [ 399.250108][T17986] binder_alloc: 17985: binder_alloc_buf, no vma [ 399.275597][T16690] binder: unexpected work type, 4, not freed [ 399.283127][T17986] debugfs: File '17985' in directory 'proc' already present! [ 399.310487][T16690] binder: unexpected work type, 4, not freed 08:33:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:37 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:37 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 399.560810][T17993] debugfs: File '17992' in directory 'proc' already present! [ 399.576110][T17993] binder_alloc: 17992: binder_alloc_buf, no vma 08:33:37 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 399.666669][T15671] binder: unexpected work type, 4, not freed [ 399.679860][T17993] debugfs: File '17992' in directory 'proc' already present! [ 399.734462][T18000] IPVS: ftp: loaded support on port[0] = 21 [ 399.786942][T18002] IPVS: ftp: loaded support on port[0] = 21 08:33:37 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:37 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:37 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 399.929855][T18011] IPVS: ftp: loaded support on port[0] = 21 [ 400.012952][T18016] debugfs: File '18015' in directory 'proc' already present! [ 400.028342][T18016] binder_alloc: 18015: binder_alloc_buf, no vma [ 400.051528][T18016] debugfs: File '18015' in directory 'proc' already present! [ 400.059259][T15671] binder: unexpected work type, 4, not freed [ 400.114509][T18013] IPVS: ftp: loaded support on port[0] = 21 [ 400.135511][T18020] IPVS: ftp: loaded support on port[0] = 21 [ 400.173438][T15671] binder: unexpected work type, 4, not freed [ 400.306488][T18025] debugfs: File '18024' in directory 'proc' already present! [ 400.336008][T18025] binder_alloc: 18024: binder_alloc_buf, no vma 08:33:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:38 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 400.365895][T15671] binder: unexpected work type, 4, not freed 08:33:38 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', 0x0, 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 400.463377][T18025] debugfs: File '18024' in directory 'proc' already present! [ 400.475916][T18031] IPVS: ftp: loaded support on port[0] = 21 [ 400.517487][T18025] binder: BINDER_SET_CONTEXT_MGR already set [ 400.523633][T18025] binder: 18024:18025 ioctl 40046207 0 returned -16 08:33:38 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:38 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 400.751778][T18038] IPVS: ftp: loaded support on port[0] = 21 08:33:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 400.895785][T18046] debugfs: File '18043' in directory 'proc' already present! [ 400.946700][T18047] IPVS: ftp: loaded support on port[0] = 21 [ 400.961239][T18046] binder_alloc: 18043: binder_alloc_buf, no vma [ 400.990069][T16510] binder: unexpected work type, 4, not freed [ 401.021037][T18046] debugfs: File '18043' in directory 'proc' already present! [ 401.102320][T18053] IPVS: ftp: loaded support on port[0] = 21 08:33:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:39 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 401.290322][T18058] IPVS: ftp: loaded support on port[0] = 21 08:33:39 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 401.366601][T18065] debugfs: File '18062' in directory 'proc' already present! [ 401.383510][T18066] IPVS: ftp: loaded support on port[0] = 21 [ 401.402162][T18065] binder_alloc: 18062: binder_alloc_buf, no vma [ 401.408814][T16510] binder: unexpected work type, 4, not freed [ 401.427967][T18068] IPVS: ftp: loaded support on port[0] = 21 [ 401.446602][T18065] debugfs: File '18062' in directory 'proc' already present! [ 401.500308][T16690] binder: unexpected work type, 4, not freed 08:33:39 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:39 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 401.699565][T18077] IPVS: ftp: loaded support on port[0] = 21 08:33:39 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 401.869465][T18084] debugfs: File '18080' in directory 'proc' already present! [ 401.902203][T18084] binder_alloc: 18080: binder_alloc_buf, no vma 08:33:39 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 401.986524][T18084] debugfs: File '18080' in directory 'proc' already present! [ 401.994257][T16690] binder: unexpected work type, 4, not freed [ 402.014879][T18085] IPVS: ftp: loaded support on port[0] = 21 [ 402.101859][T16510] binder: unexpected work type, 4, not freed [ 402.151840][T18088] IPVS: ftp: loaded support on port[0] = 21 08:33:40 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:40 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 402.331234][T18096] IPVS: ftp: loaded support on port[0] = 21 08:33:40 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 402.424584][T18100] debugfs: File '18098' in directory 'proc' already present! [ 402.527009][T18102] IPVS: ftp: loaded support on port[0] = 21 [ 402.723505][T18104] IPVS: ftp: loaded support on port[0] = 21 [ 402.766340][T18100] binder_alloc: 18098: binder_alloc_buf, no vma 08:33:40 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 402.867304][T18100] debugfs: File '18098' in directory 'proc' already present! [ 402.874992][T16690] binder: unexpected work type, 4, not freed [ 402.876848][T16690] binder: unexpected work type, 4, not freed 08:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 403.038584][T18113] debugfs: File '18112' in directory 'proc' already present! [ 403.064901][T18113] binder_alloc: 18112: binder_alloc_buf, no vma [ 403.078757][T16690] binder: unexpected work type, 4, not freed [ 403.130559][T18113] debugfs: File '18112' in directory 'proc' already present! 08:33:41 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 403.199821][T16690] binder: unexpected work type, 4, not freed 08:33:41 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 403.333344][T18122] debugfs: File '18121' in directory 'proc' already present! [ 403.349603][T16690] binder: unexpected work type, 4, not freed [ 403.357705][T18122] debugfs: File '18121' in directory 'proc' already present! [ 403.374013][T16690] binder: unexpected work type, 4, not freed 08:33:45 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:45 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 407.030958][T18136] debugfs: File '18133' in directory 'proc' already present! [ 407.164458][T18136] binder_alloc_new_buf_locked: 2 callbacks suppressed [ 407.164466][T18136] binder_alloc: 18133: binder_alloc_buf, no vma 08:33:45 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:33:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:33:45 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x0) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 407.213805][T18137] IPVS: ftp: loaded support on port[0] = 21 [ 407.303816][T16508] binder: unexpected work type, 4, not freed [ 407.322574][T18136] debugfs: File '18133' in directory 'proc' already present! [ 407.338230][T18147] IPVS: ftp: loaded support on port[0] = 21 [ 407.373167][T18143] IPVS: ftp: loaded support on port[0] = 21 08:33:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 407.478978][T18152] IPVS: ftp: loaded support on port[0] = 21 [ 407.645643][T18159] debugfs: File '18154' in directory 'proc' already present! [ 407.669632][T18159] binder_alloc: 18154: binder_alloc_buf, no vma [ 407.679879][T16508] binder: unexpected work type, 4, not freed 08:33:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 407.709443][T18159] debugfs: File '18154' in directory 'proc' already present! [ 407.730498][T16690] binder: unexpected work type, 4, not freed [ 407.823262][T18162] debugfs: File '18161' in directory 'proc' already present! [ 407.841354][T18162] binder_alloc: 18161: binder_alloc_buf, no vma [ 407.848381][T16690] binder: unexpected work type, 4, not freed [ 407.868011][T18162] debugfs: File '18161' in directory 'proc' already present! [ 407.891054][T16690] binder: unexpected work type, 4, not freed 08:33:45 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:46 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r2) [ 408.099124][T18167] debugfs: File '18166' in directory 'proc' already present! [ 408.162508][T18167] binder_alloc: 18166: binder_alloc_buf, no vma [ 408.185380][T18167] debugfs: File '18166' in directory 'proc' already present! 08:33:46 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:33:46 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 408.458225][T18175] IPVS: ftp: loaded support on port[0] = 21 [ 408.480963][T18177] debugfs: File '18176' in directory 'proc' already present! [ 408.544644][T18178] IPVS: ftp: loaded support on port[0] = 21 [ 408.629808][T18180] binder_alloc: 18176: binder_alloc_buf, no vma [ 408.641977][T18177] debugfs: File '18176' in directory 'proc' already present! [ 408.650601][T15671] binder: unexpected work type, 4, not freed 08:33:50 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:50 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r2) 08:33:50 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:50 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:50 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 412.280915][T18262] IPVS: ftp: loaded support on port[0] = 21 [ 412.296931][T18266] IPVS: ftp: loaded support on port[0] = 21 [ 412.314925][T18268] IPVS: ftp: loaded support on port[0] = 21 [ 412.324436][T18263] debugfs: File '18259' in directory 'proc' already present! 08:33:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 412.385526][T18269] IPVS: ftp: loaded support on port[0] = 21 [ 412.439134][T18270] IPVS: ftp: loaded support on port[0] = 21 [ 412.457467][T18279] debugfs: File '18276' in directory 'proc' already present! [ 412.471299][T18279] binder_alloc: 18276: binder_alloc_buf, no vma 08:33:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 412.567946][T18279] debugfs: File '18276' in directory 'proc' already present! [ 412.576800][T18248] binder: unexpected work type, 4, not freed [ 412.587953][T18248] binder: unexpected work type, 4, not freed [ 412.648714][T18283] debugfs: File '18282' in directory 'proc' already present! [ 412.742766][T18283] debugfs: File '18282' in directory 'proc' already present! 08:33:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:50 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 412.890149][T18288] debugfs: File '18286' in directory 'proc' already present! [ 412.899571][T18288] binder_alloc: 18286: binder_alloc_buf, no vma [ 412.914270][T18248] binder: unexpected work type, 4, not freed [ 412.922429][T18288] debugfs: File '18286' in directory 'proc' already present! [ 412.932731][T16690] binder: unexpected work type, 4, not freed 08:33:51 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r2) 08:33:51 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 413.135755][T18294] debugfs: File '18292' in directory 'proc' already present! 08:33:51 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:51 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 413.254351][T18294] binder_alloc: 18292: binder_alloc_buf, no vma [ 413.271040][T18248] binder: unexpected work type, 4, not freed [ 413.278303][T18294] debugfs: File '18292' in directory 'proc' already present! [ 413.322861][T18303] IPVS: ftp: loaded support on port[0] = 21 [ 413.361991][T18310] binder: BINDER_SET_CONTEXT_MGR already set [ 413.368138][T18310] binder: 18292:18310 ioctl 40046207 0 returned -16 [ 413.408739][T18307] IPVS: ftp: loaded support on port[0] = 21 [ 413.435731][T18313] IPVS: ftp: loaded support on port[0] = 21 [ 413.453145][T18315] IPVS: ftp: loaded support on port[0] = 21 08:33:54 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:54 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:54 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:54 executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 416.305450][T18388] debugfs: File '18387' in directory 'proc' already present! [ 416.348652][T18391] IPVS: ftp: loaded support on port[0] = 21 [ 416.360997][T18388] binder_alloc: 18387: binder_alloc_buf, no vma [ 416.375831][T18393] IPVS: ftp: loaded support on port[0] = 21 [ 416.378390][T18394] IPVS: ftp: loaded support on port[0] = 21 [ 416.384631][T18377] binder: unexpected work type, 4, not freed [ 416.395129][T18388] debugfs: File '18387' in directory 'proc' already present! [ 416.448438][T18398] IPVS: ftp: loaded support on port[0] = 21 [ 416.491149][T18377] binder: unexpected work type, 4, not freed [ 416.522831][T18392] IPVS: ftp: loaded support on port[0] = 21 08:33:54 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:54 executing program 5: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 416.892256][T18407] debugfs: File '18406' in directory 'proc' already present! 08:33:54 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 416.957656][T18407] binder_alloc: 18406: binder_alloc_buf, no vma 08:33:55 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 417.004665][T18411] IPVS: ftp: loaded support on port[0] = 21 [ 417.016862][T18377] binder: unexpected work type, 4, not freed [ 417.023743][T18407] debugfs: File '18406' in directory 'proc' already present! [ 417.052139][T18377] binder: unexpected work type, 4, not freed 08:33:55 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:55 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 417.211912][T18416] IPVS: ftp: loaded support on port[0] = 21 08:33:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 417.349005][T18419] IPVS: ftp: loaded support on port[0] = 21 [ 417.445949][T18429] IPVS: ftp: loaded support on port[0] = 21 [ 417.504453][T18432] IPVS: ftp: loaded support on port[0] = 21 [ 417.551635][T18431] debugfs: File '18426' in directory 'proc' already present! [ 417.567464][T18431] binder_alloc: 18426: binder_alloc_buf, no vma [ 417.575752][T18377] binder: unexpected work type, 4, not freed [ 417.589075][T18431] debugfs: File '18426' in directory 'proc' already present! [ 417.664319][T18377] binder: unexpected work type, 4, not freed 08:33:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 417.827970][T18436] debugfs: File '18435' in directory 'proc' already present! [ 417.856370][T18436] binder_alloc: 18435: binder_alloc_buf, no vma 08:33:55 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:55 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 417.878180][T18248] binder: unexpected work type, 4, not freed [ 417.893656][T18436] debugfs: File '18435' in directory 'proc' already present! 08:33:55 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:56 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 418.160641][T18446] debugfs: File '18442' in directory 'proc' already present! [ 418.247417][T18451] IPVS: ftp: loaded support on port[0] = 21 [ 418.263085][T18447] IPVS: ftp: loaded support on port[0] = 21 08:33:56 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 418.315094][T18454] IPVS: ftp: loaded support on port[0] = 21 08:33:56 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:56 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 418.494326][T18460] IPVS: ftp: loaded support on port[0] = 21 [ 418.553272][T18466] debugfs: File '18465' in directory 'proc' already present! [ 418.685450][T18467] IPVS: ftp: loaded support on port[0] = 21 [ 418.819582][T18466] binder_alloc: 18465: binder_alloc_buf, no vma [ 418.849018][T18377] binder: unexpected work type, 4, not freed [ 418.866799][T18466] debugfs: File '18465' in directory 'proc' already present! 08:33:56 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept(r1, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 419.125869][T18474] IPVS: ftp: loaded support on port[0] = 21 08:33:57 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:57 executing program 1: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 419.307003][T18484] IPVS: ftp: loaded support on port[0] = 21 [ 419.327204][T18485] IPVS: ftp: loaded support on port[0] = 21 08:33:57 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 419.400906][T18489] debugfs: File '18487' in directory 'proc' already present! 08:33:57 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 419.484456][T18489] binder_alloc: 18487: binder_alloc_buf, no vma [ 419.499683][T18489] debugfs: File '18487' in directory 'proc' already present! 08:33:57 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:57 executing program 5: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 419.621720][T18496] IPVS: ftp: loaded support on port[0] = 21 [ 419.623274][T18499] debugfs: File '18498' in directory 'proc' already present! [ 419.648086][T18499] binder_alloc: 18498: binder_alloc_buf, no vma [ 419.656382][T18377] binder: unexpected work type, 4, not freed [ 419.720833][T18500] IPVS: ftp: loaded support on port[0] = 21 [ 419.757930][T18499] debugfs: File '18498' in directory 'proc' already present! [ 419.836193][T18504] binder: BINDER_SET_CONTEXT_MGR already set [ 419.842383][T18504] binder: 18498:18504 ioctl 40046207 0 returned -16 08:33:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:57 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept(r1, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 419.964790][T18511] IPVS: ftp: loaded support on port[0] = 21 08:33:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 420.167695][T18519] IPVS: ftp: loaded support on port[0] = 21 [ 420.202975][T18520] debugfs: File '18518' in directory 'proc' already present! [ 420.236951][T18520] binder_alloc: 18518: binder_alloc_buf, no vma [ 420.267424][T18377] binder: unexpected work type, 4, not freed [ 420.285878][T18520] debugfs: File '18518' in directory 'proc' already present! [ 420.296690][T18524] IPVS: ftp: loaded support on port[0] = 21 [ 420.327144][T18377] binder: unexpected work type, 4, not freed 08:33:58 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:58 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 420.576406][T18533] IPVS: ftp: loaded support on port[0] = 21 08:33:58 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:33:58 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) accept(r1, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) [ 420.699529][T18536] debugfs: File '18535' in directory 'proc' already present! [ 420.800409][T18538] IPVS: ftp: loaded support on port[0] = 21 08:33:58 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:58 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 420.841155][T18536] debugfs: File '18535' in directory 'proc' already present! [ 420.985980][T18553] IPVS: ftp: loaded support on port[0] = 21 [ 421.011443][T18552] IPVS: ftp: loaded support on port[0] = 21 08:33:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 421.042016][T18554] IPVS: ftp: loaded support on port[0] = 21 [ 421.126836][T18564] debugfs: File '18561' in directory 'proc' already present! [ 421.159316][T18565] IPVS: ftp: loaded support on port[0] = 21 08:33:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 421.200968][T18564] binder_alloc: 18561: binder_alloc_buf, no vma [ 421.208197][T18377] binder: unexpected work type, 4, not freed [ 421.224002][T18564] debugfs: File '18561' in directory 'proc' already present! [ 421.237721][T18377] binder: unexpected work type, 4, not freed [ 421.393686][T18574] debugfs: File '18573' in directory 'proc' already present! [ 421.472162][T18574] binder_alloc: 18573: binder_alloc_buf, no vma [ 421.486789][T18574] debugfs: File '18573' in directory 'proc' already present! 08:33:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 421.618718][T18579] debugfs: File '18578' in directory 'proc' already present! [ 421.640578][T18579] binder_alloc: 18578: binder_alloc_buf, no vma [ 421.647733][T18377] binder: unexpected work type, 4, not freed [ 421.663059][T18579] debugfs: File '18578' in directory 'proc' already present! [ 421.679455][T18377] binder: unexpected work type, 4, not freed 08:33:59 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:59 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:59 executing program 2: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:33:59 executing program 0: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:33:59 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:33:59 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 421.891993][T18590] debugfs: File '18588' in directory 'proc' already present! [ 421.931623][T18596] IPVS: ftp: loaded support on port[0] = 21 [ 421.971714][T18590] binder_alloc: 18588: binder_alloc_buf, no vma 08:34:00 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x12000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 422.021660][T18603] IPVS: ftp: loaded support on port[0] = 21 [ 422.038489][T18590] debugfs: File '18588' in directory 'proc' already present! [ 422.049291][T18604] IPVS: ftp: loaded support on port[0] = 21 [ 422.145783][T18609] IPVS: ftp: loaded support on port[0] = 21 08:34:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:34:00 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:00 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:34:00 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 422.355981][T18618] debugfs: File '18616' in directory 'proc' already present! [ 422.396692][T18248] binder: unexpected work type, 4, not freed [ 422.412066][T18618] debugfs: File '18616' in directory 'proc' already present! [ 422.468656][T18621] IPVS: ftp: loaded support on port[0] = 21 [ 422.477856][T18627] IPVS: ftp: loaded support on port[0] = 21 [ 422.494185][T18248] binder: unexpected work type, 4, not freed 08:34:00 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 422.607586][T18632] IPVS: ftp: loaded support on port[0] = 21 08:34:00 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 422.795032][T18635] debugfs: File '18634' in directory 'proc' already present! 08:34:00 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 422.900601][T18635] binder_alloc_new_buf_locked: 1 callbacks suppressed [ 422.900608][T18635] binder_alloc: 18634: binder_alloc_buf, no vma [ 423.018235][T18635] debugfs: File '18634' in directory 'proc' already present! [ 423.029637][T18377] binder: unexpected work type, 4, not freed [ 423.036294][T18377] binder: unexpected work type, 4, not freed 08:34:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 423.066883][T18644] IPVS: ftp: loaded support on port[0] = 21 08:34:01 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 423.140008][T18646] IPVS: ftp: loaded support on port[0] = 21 08:34:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) 08:34:01 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 423.297575][T18655] debugfs: File '18653' in directory 'proc' already present! [ 423.312893][T18656] IPVS: ftp: loaded support on port[0] = 21 [ 423.332417][T18657] IPVS: ftp: loaded support on port[0] = 21 [ 423.405246][T18663] IPVS: ftp: loaded support on port[0] = 21 [ 423.452418][T18655] binder_alloc: 18653: binder_alloc_buf, no vma [ 423.473814][T18655] debugfs: File '18653' in directory 'proc' already present! [ 423.510393][T18667] binder_alloc: 18653: binder_alloc_buf, no vma 08:34:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:34:01 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 423.573658][T18670] IPVS: ftp: loaded support on port[0] = 21 08:34:01 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x0) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(r0, 0x0, 0x0) dup2(0xffffffffffffffff, r1) [ 423.689993][T18674] debugfs: File '18673' in directory 'proc' already present! [ 423.713678][T18674] binder_alloc: 18673: binder_alloc_buf, no vma [ 423.748919][T18377] binder: unexpected work type, 4, not freed [ 423.766017][T18678] IPVS: ftp: loaded support on port[0] = 21 [ 423.781188][T18674] debugfs: File '18673' in directory 'proc' already present! 08:34:01 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 423.840312][T18680] IPVS: ftp: loaded support on port[0] = 21 08:34:01 executing program 2: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 424.081754][T18691] debugfs: File '18689' in directory 'proc' already present! 08:34:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 424.213866][T18691] binder_alloc: 18689: binder_alloc_buf, no vma 08:34:02 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) 08:34:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:34:02 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 424.401697][T18697] IPVS: ftp: loaded support on port[0] = 21 [ 424.464330][T18707] debugfs: File '18699' in directory 'proc' already present! 08:34:02 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 424.546348][T18707] binder_alloc: 18699: binder_alloc_buf, no vma [ 424.565378][T18708] IPVS: ftp: loaded support on port[0] = 21 [ 424.577803][T18706] IPVS: ftp: loaded support on port[0] = 21 [ 424.627810][T18713] IPVS: ftp: loaded support on port[0] = 21 [ 424.655739][T18716] IPVS: ftp: loaded support on port[0] = 21 08:34:02 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 424.718500][T18707] debugfs: File '18699' in directory 'proc' already present! 08:34:02 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:02 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 424.966671][T18722] debugfs: File '18720' in directory 'proc' already present! [ 425.024386][T18722] binder_alloc: 18720: binder_alloc_buf, no vma [ 425.066817][T18727] IPVS: ftp: loaded support on port[0] = 21 [ 425.083789][T18722] debugfs: File '18720' in directory 'proc' already present! [ 425.109866][T18730] IPVS: ftp: loaded support on port[0] = 21 08:34:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:34:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:03 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 425.264841][T18736] debugfs: File '18735' in directory 'proc' already present! [ 425.294656][T18736] binder_alloc: 18735: binder_alloc_buf, no vma [ 425.330802][T18248] binder: unexpected work type, 4, not freed [ 425.343134][T18736] debugfs: File '18735' in directory 'proc' already present! [ 425.355288][T18377] binder: unexpected work type, 4, not freed 08:34:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x1200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 425.424071][T18744] IPVS: ftp: loaded support on port[0] = 21 08:34:03 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 425.476338][T18743] IPVS: ftp: loaded support on port[0] = 21 [ 425.528712][T18748] debugfs: File '18746' in directory 'proc' already present! [ 425.591273][T18748] binder_alloc: 18746: binder_alloc_buf, no vma [ 425.623989][T18748] debugfs: File '18746' in directory 'proc' already present! [ 425.653546][T18248] binder: unexpected work type, 4, not freed 08:34:03 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:03 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) [ 425.807783][T18756] IPVS: ftp: loaded support on port[0] = 21 08:34:03 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:03 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 425.912887][T18760] debugfs: File '18759' in directory 'proc' already present! [ 426.028413][T18760] debugfs: File '18759' in directory 'proc' already present! [ 426.050880][T18774] IPVS: ftp: loaded support on port[0] = 21 [ 426.125406][T18769] IPVS: ftp: loaded support on port[0] = 21 [ 426.149366][T18771] IPVS: ftp: loaded support on port[0] = 21 08:34:04 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000200), &(0x7f0000000240)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x44, 0x0, &(0x7f0000000480)=[@transaction={0x40406300, {0x1, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 08:34:04 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:04 executing program 2: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(0xffffffffffffffff, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r1 = accept(0xffffffffffffffff, 0x0, 0x0) dup2(r0, r1) [ 426.330805][T18781] debugfs: File '18779' in directory 'proc' already present! [ 426.364193][T18781] binder_alloc: 18779: binder_alloc_buf, no vma [ 426.383383][T18377] binder: unexpected work type, 4, not freed [ 426.392599][T18781] debugfs: File '18779' in directory 'proc' already present! 08:34:04 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 426.472776][T18788] IPVS: ftp: loaded support on port[0] = 21 [ 426.585004][T18787] IPVS: ftp: loaded support on port[0] = 21 [ 426.726058][T18796] IPVS: ftp: loaded support on port[0] = 21 08:34:04 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) lsetxattr$security_selinux(0x0, 0x0, &(0x7f0000000180)='system_u:object_r:dhcpc_var_run_t:s0\x00', 0x25, 0x3) connect$netrom(0xffffffffffffffff, 0x0, 0x0) connect$netrom(r1, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x400000000400fffe, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.upper\x00', &(0x7f0000000440)=ANY=[], 0x0, 0x2) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) 08:34:04 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @bcast, @rose, @rose, @null]}, 0x48) listen(r1, 0x81) unshare(0x40000000) ioctl$KVM_GET_TSC_KHZ(0xffffffffffffffff, 0xaea3) r2 = accept(r1, 0x0, 0x0) dup2(r0, r2) [ 426.961712][ C1] ------------[ cut here ]------------ [ 426.962292][T18793] ================================================================== [ 426.969473][ C1] refcount_t: increment on 0; use-after-free. [ 426.980584][T18793] BUG: KASAN: use-after-free in refcount_inc_not_zero_checked+0x81/0x200 [ 426.980598][T18793] Read of size 4 at addr ffff888095650b00 by task syz-executor.1/18793 [ 426.980602][T18793] [ 426.980617][T18793] CPU: 0 PID: 18793 Comm: syz-executor.1 Not tainted 5.2.0+ #64 [ 426.980624][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 426.980629][T18793] Call Trace: [ 426.980652][T18793] dump_stack+0x16f/0x1f0 [ 426.980667][T18793] ? refcount_inc_not_zero_checked+0x81/0x200 [ 426.980697][T18793] print_address_description.cold+0xd4/0x306 [ 426.988951][ C1] WARNING: CPU: 1 PID: 18787 at lib/refcount.c:156 refcount_inc_checked+0x61/0x70 [ 427.000771][T18793] ? refcount_inc_not_zero_checked+0x81/0x200 [ 427.011506][ C1] Kernel panic - not syncing: panic_on_warn set ... [ 427.013960][T18793] ? refcount_inc_not_zero_checked+0x81/0x200 [ 427.087742][T18793] __kasan_report.cold+0x1b/0x36 [ 427.094433][T18793] ? refcount_inc_not_zero_checked+0x81/0x200 [ 427.100727][T18793] kasan_report+0x12/0x17 [ 427.106503][T18793] check_memory_region+0x134/0x1a0 [ 427.111731][T18793] __kasan_check_read+0x11/0x20 [ 427.116977][T18793] refcount_inc_not_zero_checked+0x81/0x200 [ 427.124191][T18793] ? refcount_dec_and_mutex_lock+0x90/0x90 [ 427.131693][T18793] ? __kasan_check_write+0x14/0x20 [ 427.137379][T18793] refcount_inc_checked+0x17/0x70 [ 427.143092][T18793] nr_release+0x62/0x3e0 [ 427.147906][T18793] __sock_release+0xce/0x280 [ 427.153208][T18793] sock_close+0x1e/0x30 [ 427.158354][T18793] __fput+0x2ff/0x890 [ 427.162630][T18793] ? __sock_release+0x280/0x280 [ 427.168316][T18793] ____fput+0x16/0x20 [ 427.173585][T18793] task_work_run+0x145/0x1c0 [ 427.178668][T18793] exit_to_usermode_loop+0x316/0x380 [ 427.184563][T18793] do_syscall_64+0x5a9/0x6a0 [ 427.191109][T18793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.197833][T18793] RIP: 0033:0x459819 [ 427.202489][T18793] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 427.222512][T18793] RSP: 002b:00007f60a3575c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 427.231245][T18793] RAX: 0000000000000004 RBX: 0000000000000002 RCX: 0000000000459819 [ 427.240011][T18793] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 427.248599][T18793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 427.257069][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60a35766d4 [ 427.265212][T18793] R13: 00000000004bfe9c R14: 00000000004d1b28 R15: 00000000ffffffff [ 427.273388][T18793] [ 427.273404][ C1] CPU: 1 PID: 18787 Comm: syz-executor.4 Not tainted 5.2.0+ #64 [ 427.273419][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.275769][T18793] Allocated by task 18787: [ 427.283820][ C1] Call Trace: [ 427.283849][ C1] [ 427.294365][T18793] save_stack+0x23/0x90 [ 427.298807][ C1] dump_stack+0x16f/0x1f0 [ 427.302097][T18793] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 427.302115][T18793] kasan_kmalloc+0x9/0x10 [ 427.305099][ C1] ? refcount_inc_checked+0x20/0x70 [ 427.309446][T18793] __kmalloc+0x163/0x760 [ 427.313946][ C1] panic+0x2dc/0x755 [ 427.319694][T18793] sk_prot_alloc+0x23a/0x310 [ 427.319710][T18793] sk_alloc+0x39/0xf60 [ 427.324140][ C1] ? add_taint.cold+0x16/0x16 [ 427.329506][T18793] nr_rx_frame+0x733/0x1e73 [ 427.329524][T18793] nr_loopback_timer+0x7b/0x170 [ 427.333936][ C1] ? __kasan_check_write+0x14/0x20 [ 427.338003][T18793] call_timer_fn+0x1ac/0x700 [ 427.342597][ C1] ? __warn.cold+0x5/0x4c [ 427.346837][T18793] run_timer_softirq+0x66c/0x16a0 [ 427.351996][ C1] ? __warn+0xe7/0x1e0 [ 427.356799][T18793] __do_softirq+0x30d/0x970 [ 427.356809][T18793] [ 427.362214][ C1] ? refcount_inc_checked+0x61/0x70 [ 427.367798][T18793] Freed by task 18795: [ 427.367823][T18793] save_stack+0x23/0x90 [ 427.372787][ C1] __warn.cold+0x20/0x4c [ 427.377566][T18793] __kasan_slab_free+0x102/0x150 [ 427.377584][T18793] kasan_slab_free+0xe/0x10 [ 427.383391][ C1] ? refcount_inc_checked+0x61/0x70 [ 427.388161][T18793] kfree+0x10a/0x2a0 [ 427.388180][T18793] __sk_destruct+0x4f7/0x6e0 [ 427.392705][ C1] report_bug+0x263/0x2b0 [ 427.395197][T18793] sk_destruct+0x86/0xa0 [ 427.400631][ C1] do_error_trap+0x11b/0x200 [ 427.404802][T18793] __sk_free+0xfb/0x360 [ 427.409115][ C1] do_invalid_op+0x37/0x50 [ 427.413467][T18793] sk_free+0x42/0x50 [ 427.419763][ C1] ? refcount_inc_checked+0x61/0x70 [ 427.424445][T18793] sock_efree+0x61/0x80 [ 427.429970][ C1] invalid_op+0x23/0x30 [ 427.434193][T18793] skb_release_head_state+0xeb/0x250 [ 427.434212][T18793] skb_release_all+0x16/0x60 [ 427.438909][ C1] RIP: 0010:refcount_inc_checked+0x61/0x70 [ 427.443506][T18793] kfree_skb+0x101/0x380 [ 427.448090][ C1] Code: 1d 2c 9e 67 06 31 ff 89 de e8 9b 24 38 fe 84 db 75 dd e8 52 23 38 fe 48 c7 c7 40 d6 c5 87 c6 05 0c 9e 67 06 01 e8 87 4a 0a fe <0f> 0b eb c1 90 90 90 90 90 90 90 90 90 90 90 55 48 89 e5 41 57 41 [ 427.452987][T18793] nr_accept+0x56e/0x700 [ 427.457796][ C1] RSP: 0018:ffff8880ae909bf0 EFLAGS: 00010282 [ 427.463006][T18793] __sys_accept4+0x34e/0x6a0 [ 427.467213][ C1] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 427.473644][T18793] __x64_sys_accept+0x75/0xb0 [ 427.477899][ C1] RDX: 0000000000000100 RSI: ffffffff815b9de2 RDI: ffffed1015d21370 [ 427.477915][ C1] RBP: ffff8880ae909c00 R08: 1ffffffff14a6d5e R09: fffffbfff14a6d5f [ 427.482268][T18793] do_syscall_64+0xfd/0x6a0 [ 427.482292][T18793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 427.487826][ C1] R10: fffffbfff14a6d5e R11: ffffffff8a536af7 R12: ffff888095650b00 [ 427.492647][T18793] [ 427.498601][ C1] R13: ffff888095650ae8 R14: ffff8880a539cc88 R15: ffff8880a539cc60 [ 427.498633][ C1] ? vprintk_func+0x82/0x11c [ 427.502875][T18793] The buggy address belongs to the object at ffff888095650a80 [ 427.502875][T18793] which belongs to the cache kmalloc-2k of size 2048 [ 427.523382][ C1] nr_insert_socket+0x2d/0xe0 [ 427.527895][T18793] The buggy address is located 128 bytes inside of [ 427.527895][T18793] 2048-byte region [ffff888095650a80, ffff888095651280) [ 427.527907][T18793] The buggy address belongs to the page: [ 427.534544][ C1] nr_rx_frame+0x1605/0x1e73 [ 427.539231][T18793] page:ffffea0002559400 refcount:1 mapcount:0 mapping:ffff8880aa400e00 index:0x0 compound_mapcount: 0 [ 427.548196][ C1] nr_loopback_timer+0x7b/0x170 [ 427.553029][T18793] flags: 0x1fffc0000010200(slab|head) [ 427.561842][ C1] call_timer_fn+0x1ac/0x700 [ 427.570195][T18793] raw: 01fffc0000010200 ffffea00012c5688 ffff8880aa401948 ffff8880aa400e00 [ 427.574720][ C1] ? nr_process_rx_frame+0x1540/0x1540 [ 427.580740][T18793] raw: 0000000000000000 ffff888095650200 0000000100000003 0000000000000000 [ 427.588898][ C1] ? msleep_interruptible+0x150/0x150 [ 427.591350][T18793] page dumped because: kasan: bad access detected [ 427.599798][ C1] ? run_timer_softirq+0x65a/0x16a0 [ 427.604384][T18793] [ 427.618780][ C1] ? trace_hardirqs_on+0x67/0x220 [ 427.623517][T18793] Memory state around the buggy address: [ 427.623534][T18793] ffff888095650a00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 427.638428][ C1] ? __kasan_check_read+0x11/0x20 [ 427.644070][T18793] ffff888095650a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.649009][ C1] ? nr_process_rx_frame+0x1540/0x1540 [ 427.660088][T18793] >ffff888095650b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.665051][ C1] ? nr_process_rx_frame+0x1540/0x1540 [ 427.670569][T18793] ^ [ 427.670585][T18793] ffff888095650b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.675375][ C1] run_timer_softirq+0x66c/0x16a0 [ 427.684681][T18793] ffff888095650c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 427.690694][ C1] ? add_timer+0x8a0/0x8a0 [ 427.699656][T18793] ================================================================== [ 427.705487][ C1] __do_softirq+0x30d/0x970 [ 427.711986][T18793] Disabling lock debugging due to kernel taint [ 427.712209][T18793] ------------[ cut here ]------------ [ 427.717317][ C1] ? sched_clock_cpu+0x1b/0x170 [ 427.719921][T18793] ODEBUG: activate not available (active state 0) object type: timer_list hint: nr_t1timer_expiry+0x0/0x340 [ 427.725166][ C1] irq_exit+0x1d0/0x200 [ 427.731276][T18793] WARNING: CPU: 0 PID: 18793 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 427.739363][ C1] smp_apic_timer_interrupt+0x14e/0x550 [ 427.745025][T18793] Modules linked in: [ 427.753646][ C1] apic_timer_interrupt+0xf/0x20 [ 427.759565][T18793] CPU: 0 PID: 18793 Comm: syz-executor.1 Tainted: G B 5.2.0+ #64 [ 427.769558][ C1] [ 427.778520][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 427.782785][ C1] RIP: 0010:console_unlock+0x7e5/0xf00 [ 427.791535][T18793] RIP: 0010:debug_print_object+0x168/0x250 [ 427.797085][ C1] Code: d2 88 48 c1 e8 03 42 80 3c 30 00 0f 85 8c 06 00 00 48 83 3d 5c ab 77 07 00 0f 84 fd 04 00 00 e8 41 1e 16 00 48 8b 7d 98 57 9d <0f> 1f 44 00 00 e8 31 1e 16 00 48 89 de 4c 89 e7 e8 46 1f 16 00 49 [ 427.806394][T18793] Code: dd 80 02 c6 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 80 02 c6 87 48 c7 c7 80 f7 c5 87 e8 60 0d 09 fe <0f> 0b 83 05 e3 68 6a 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 427.810993][ C1] RSP: 0018:ffff88804f467638 EFLAGS: 00000246 ORIG_RAX: ffffffffffffff13 [ 427.819639][T18793] RSP: 0018:ffff88804a10faf0 EFLAGS: 00010082 [ 427.825771][ C1] RAX: 0000000000040000 RBX: 00000000000198a4 RCX: ffffc9000e7e1000 [ 427.833698][T18793] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 427.839538][ C1] RDX: 0000000000040000 RSI: ffffffff815b383f RDI: 0000000000000246 [ 427.844540][T18793] RDX: 0000000000040000 RSI: ffffffff815b9de2 RDI: ffffed1009421f50 [ 427.857736][ C1] RBP: ffff88804f4676c0 R08: 1ffffffff14a6d43 R09: fffffbfff14a6d44 [ 427.862042][T18793] RBP: ffff88804a10fb30 R08: ffff88805cf34080 R09: fffffbfff13494e8 [ 427.872419][ C1] R10: fffffbfff14a6d43 R11: ffffffff8a536a1f R12: 00000000000198a4 [ 427.878529][T18793] R10: fffffbfff13494e7 R11: ffffffff89a4a73f R12: 0000000000000001 [ 427.882761][ C1] R13: 0000000000000200 R14: dffffc0000000000 R15: 00000000000198a4 [ 427.887964][T18793] R13: ffffffff88db3f40 R14: ffffffff8160d430 R15: 1ffff11009421f6c [ 427.897587][ C1] ? console_unlock+0x7df/0xf00 [ 427.900711][T18793] FS: 00007f60a3576700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 427.911298][ C1] vprintk_emit+0x299/0x6e0 [ 427.917094][T18793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 427.917111][T18793] CR2: 0000000001a5b668 CR3: 000000005b09a000 CR4: 00000000001426f0 [ 427.923190][ C1] vprintk_default+0x28/0x30 [ 427.943328][T18793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 427.965332][ C1] vprintk_func+0x7a/0x11c [ 427.973933][T18793] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 427.980677][ C1] printk+0xba/0xed [ 427.989182][T18793] Call Trace: [ 427.997184][ C1] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 428.006100][T18793] ? kasan_report+0x12/0x17 [ 428.014812][ C1] ? internal_create_group+0x69b/0xc30 [ 428.023153][T18793] debug_object_activate+0x2e5/0x470 [ 428.031531][ C1] kobject_uevent_env+0xe2/0x1023 [ 428.041325][T18793] ? debug_object_init_on_stack+0x20/0x20 [ 428.050307][ C1] kobject_uevent+0x20/0x26 [ 428.059224][T18793] ? do_raw_spin_lock+0x12a/0x2e0 [ 428.067868][ C1] netdev_queue_update_kobjects+0x2ff/0x3d0 [ 428.073595][T18793] mod_timer+0x415/0xb90 [ 428.083882][ C1] netdev_register_kobject+0x29b/0x3b0 [ 428.089001][T18793] ? call_timer_fn+0x700/0x700 [ 428.097248][ C1] register_netdevice+0x875/0xff0 [ 428.105379][T18793] ? check_memory_region+0x134/0x1a0 [ 428.110253][ C1] ? netdev_change_features+0xb0/0xb0 [ 428.118503][T18793] sk_reset_timer+0x24/0x60 [ 428.123396][ C1] ? alloc_netdev_mqs+0x98c/0xd30 [ 428.132125][T18793] nr_start_t1timer+0x6e/0xa0 [ 428.136626][ C1] __ip_tunnel_create+0x36b/0x530 [ 428.140203][T18793] nr_release+0x1de/0x3e0 [ 428.146110][ C1] ? lock_downgrade+0x920/0x920 [ 428.151126][T18793] __sock_release+0xce/0x280 [ 428.156967][ C1] ? ip_tunnel_encap_del_ops+0x70/0x70 [ 428.162436][T18793] sock_close+0x1e/0x30 [ 428.167727][ C1] ip_tunnel_init_net+0x379/0x9f0 [ 428.174249][T18793] __fput+0x2ff/0x890 [ 428.179385][ C1] ? ip_tunnel_ioctl+0xc00/0xc00 [ 428.185401][T18793] ? __sock_release+0x280/0x280 [ 428.192162][ C1] ? rcu_read_lock_sched_held+0x110/0x130 [ 428.197257][T18793] ____fput+0x16/0x20 [ 428.203076][ C1] ? __kmalloc+0x5ea/0x760 [ 428.208169][T18793] task_work_run+0x145/0x1c0 [ 428.213519][ C1] ? ipip_exit_batch_net+0x30/0x30 [ 428.219100][T18793] exit_to_usermode_loop+0x316/0x380 [ 428.224536][ C1] ipip_init_net+0x2a/0x30 [ 428.229612][T18793] do_syscall_64+0x5a9/0x6a0 [ 428.235072][ C1] ? ipip_init_net+0x2a/0x30 [ 428.240155][T18793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.246234][ C1] ops_init+0xb3/0x420 [ 428.251250][T18793] RIP: 0033:0x459819 [ 428.256666][ C1] setup_net+0x2d2/0x890 [ 428.261660][T18793] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.267587][ C1] ? __kasan_check_write+0x14/0x20 [ 428.272455][T18793] RSP: 002b:00007f60a3575c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 428.277908][ C1] ? down_read_killable+0x10d/0x460 [ 428.282250][T18793] RAX: 0000000000000004 RBX: 0000000000000002 RCX: 0000000000459819 [ 428.287471][ C1] ? rcu_read_lock_sched_held+0x110/0x130 [ 428.292614][T18793] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 428.298344][ C1] ? ops_init+0x420/0x420 [ 428.302688][T18793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.307448][ C1] ? net_alloc_generic+0x23/0x70 [ 428.312095][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60a35766d4 [ 428.312110][T18793] R13: 00000000004bfe9c R14: 00000000004d1b28 R15: 00000000ffffffff [ 428.317827][ C1] copy_net_ns+0x290/0x41f [ 428.323589][T18793] irq event stamp: 458 [ 428.328175][ C1] create_new_namespaces+0x400/0x7b0 [ 428.333289][T18793] hardirqs last enabled at (457): [] _raw_spin_unlock_irq+0x28/0x70 [ 428.333312][T18793] hardirqs last disabled at (458): [] _raw_spin_lock_irqsave+0x6f/0xd0 [ 428.338055][ C1] unshare_nsproxy_namespaces+0xc2/0x200 [ 428.344111][T18793] softirqs last enabled at (426): [] release_sock+0x156/0x1c0 [ 428.348418][ C1] ksys_unshare+0x444/0x980 [ 428.352781][T18793] softirqs last disabled at (424): [] release_sock+0x20/0x1c0 [ 428.357028][ C1] ? walk_process_tree+0x2c0/0x2c0 [ 428.381521][T18793] ---[ end trace b40b12e836c72ce1 ]--- [ 428.387570][ C1] ? trace_hardirqs_on_thunk+0x1a/0x20 [ 428.397475][T18793] ------------[ cut here ]------------ [ 428.402894][ C1] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.402910][ C1] ? do_syscall_64+0x26/0x6a0 [ 428.402939][ C1] ? lockdep_hardirqs_on+0x418/0x5d0 [ 428.411536][T18793] ODEBUG: assert_init not available (active state 0) object type: timer_list hint: nr_t2timer_expiry+0x0/0xb0 [ 428.417651][ C1] __x64_sys_unshare+0x31/0x40 [ 428.427283][T18793] WARNING: CPU: 0 PID: 18793 at lib/debugobjects.c:481 debug_print_object+0x168/0x250 [ 428.431516][ C1] do_syscall_64+0xfd/0x6a0 [ 428.441111][T18793] Modules linked in: [ 428.446277][ C1] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.455181][T18793] CPU: 0 PID: 18793 Comm: syz-executor.1 Tainted: G B W 5.2.0+ #64 [ 428.463628][ C1] RIP: 0033:0x459819 [ 428.468198][T18793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 428.472273][ C1] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.477851][T18793] RIP: 0010:debug_print_object+0x168/0x250 [ 428.487801][ C1] RSP: 002b:00007f7f3869bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 428.498816][T18793] Code: dd 80 02 c6 87 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 b5 00 00 00 48 8b 14 dd 80 02 c6 87 48 c7 c7 80 f7 c5 87 e8 60 0d 09 fe <0f> 0b 83 05 e3 68 6a 06 01 48 83 c4 20 5b 41 5c 41 5d 41 5e 5d c3 [ 428.504597][ C1] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 0000000000459819 [ 428.514146][T18793] RSP: 0018:ffff88804a10fb40 EFLAGS: 00010282 [ 428.518916][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 428.529154][T18793] RAX: 0000000000000000 RBX: 0000000000000005 RCX: 0000000000000000 [ 428.529171][T18793] RDX: 0000000000040000 RSI: ffffffff815b9de2 RDI: ffffed1009421f5a [ 428.535348][ C1] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 428.543196][T18793] RBP: ffff88804a10fb80 R08: ffff88805cf34080 R09: fffffbfff13494e8 [ 428.543213][T18793] R10: fffffbfff13494e7 R11: ffffffff89a4a73f R12: 0000000000000002 [ 428.550252][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f7f3869c6d4 [ 428.556111][T18793] R13: ffffffff88db3f40 R14: ffffffff8160d430 R15: ffff888095650fa0 [ 428.556129][T18793] FS: 00007f60a3576700(0000) GS:ffff8880ae800000(0000) knlGS:0000000000000000 [ 428.562527][ C1] R13: 00000000004c8db2 R14: 00000000004dfcb8 R15: 00000000ffffffff [ 428.568283][T18793] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 428.568298][T18793] CR2: 0000000001a5b668 CR3: 000000005b09a000 CR4: 00000000001426f0 [ 428.834973][T18793] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 428.844084][T18793] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 428.853474][T18793] Call Trace: [ 428.856896][T18793] ? kasan_report+0x12/0x17 [ 428.862060][T18793] debug_object_assert_init+0x23a/0x2f0 [ 428.868336][T18793] ? debug_object_activate+0x470/0x470 [ 428.874644][T18793] ? kasan_report+0x12/0x17 [ 428.879506][T18793] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 428.886296][T18793] del_timer+0x7c/0x120 [ 428.890553][T18793] ? detach_if_pending+0x4f0/0x4f0 [ 428.896484][T18793] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 428.903256][T18793] sk_stop_timer+0x1c/0x60 [ 428.907687][T18793] nr_stop_t2timer+0x1e/0x30 [ 428.913536][T18793] nr_release+0x1e6/0x3e0 [ 428.917882][T18793] __sock_release+0xce/0x280 [ 428.922697][T18793] sock_close+0x1e/0x30 [ 428.926866][T18793] __fput+0x2ff/0x890 [ 428.931157][T18793] ? __sock_release+0x280/0x280 [ 428.936400][T18793] ____fput+0x16/0x20 [ 428.940600][T18793] task_work_run+0x145/0x1c0 [ 428.945528][T18793] exit_to_usermode_loop+0x316/0x380 [ 428.951215][T18793] do_syscall_64+0x5a9/0x6a0 [ 428.956376][T18793] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 428.963386][T18793] RIP: 0033:0x459819 [ 428.968788][T18793] Code: fd b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 428.988751][T18793] RSP: 002b:00007f60a3575c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000021 [ 428.997246][T18793] RAX: 0000000000000004 RBX: 0000000000000002 RCX: 0000000000459819 [ 429.005489][T18793] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000003 [ 429.013828][T18793] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000000 [ 429.022101][T18793] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60a35766d4 [ 429.030478][T18793] R13: 00000000004bfe9c R14: 00000000004d1b28 R15: 00000000ffffffff [ 429.038773][T18793] irq event stamp: 458 [ 429.043285][T18793] hardirqs last enabled at (457): [] _raw_spin_unlock_irq+0x28/0x70 [ 429.053391][T18793] hardirqs last disabled at (458): [] _raw_spin_lock_irqsave+0x6f/0xd0 [ 429.064188][T18793] softirqs last enabled at (426): [] release_sock+0x156/0x1c0 [ 429.074096][T18793] softirqs last disabled at (424): [] release_sock+0x20/0x1c0 [ 429.083783][T18793] ---[ end trace b40b12e836c72ce2 ]--- [ 429.090961][ C1] Kernel Offset: disabled [ 429.095612][ C1] Rebooting in 86400 seconds..