xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 08:31:57 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:31:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x300, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20001) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x300, 0x70bd26, 0x25dfdbfc, "", ["", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000000}, 0x20001) (async) 08:31:57 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x41, 0x0, @fd=r0, 0x101, {0x0, r1}, 0x401, 0x3, 0x0, {0x0, 0x0, r0}}, 0x0) (async) syz_io_uring_setup(0x3fdc, &(0x7f00000000c0)={0x0, 0xd039, 0x4, 0x1, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x60, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x1d, 0x1, {0x1, r3}}, 0x8) 08:31:57 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) 08:31:57 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:31:57 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 08:31:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x150, 0x0, r3, [{{0x3, 0x3, 0x8, 0x8, 0x3, 0x40, {0x0, 0x6, 0x2, 0x2e600296, 0x7, 0x9, 0x80000001, 0x6, 0x0, 0x2000, 0x6e1, r6, r7, 0x0, 0x2}}, {0x6, 0xfab4, 0x1, 0x40, '#'}}, {{0x2, 0x3, 0x80000001, 0x6, 0xff, 0x9, {0x1, 0x4, 0x101, 0x4, 0x9, 0x9, 0xfffffffd, 0x8, 0x0, 0xc000, 0x8, 0xee00, 0xee01, 0x7, 0x101}}, {0x6, 0x6, 0x2, 0x8, '!%'}}]}, 0x150) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r4}}, './file0\x00'}) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f00000023c0), 0x4) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r9, 0x10000000) 08:31:57 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040)=0x8, 0x4) socketpair(0x0, 0x1, 0x3, &(0x7f0000000000)) (async) socketpair(0x0, 0x1, 0x3, &(0x7f0000000000)) 08:31:57 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000040), 0x10) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x41, 0x0, @fd=r0, 0x101, {0x0, r1}, 0x401, 0x3, 0x0, {0x0, 0x0, r0}}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SPLICE={0x1e, 0x41, 0x0, @fd=r0, 0x101, {0x0, r1}, 0x401, 0x3, 0x0, {0x0, 0x0, r0}}, 0x0) syz_io_uring_setup(0x3fdc, &(0x7f00000000c0)={0x0, 0xd039, 0x4, 0x1, 0x1}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000180)) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f00000001c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x60, 0x6000, @fd=r0, 0x8, 0x0, 0x0, 0x1d, 0x1, {0x1, r3}}, 0x8) 08:31:57 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) socket$inet6_dccp(0xa, 0x6, 0x0) 08:31:57 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:31:57 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) 08:31:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x150, 0x0, r3, [{{0x3, 0x3, 0x8, 0x8, 0x3, 0x40, {0x0, 0x6, 0x2, 0x2e600296, 0x7, 0x9, 0x80000001, 0x6, 0x0, 0x2000, 0x6e1, r6, r7, 0x0, 0x2}}, {0x6, 0xfab4, 0x1, 0x40, '#'}}, {{0x2, 0x3, 0x80000001, 0x6, 0xff, 0x9, {0x1, 0x4, 0x101, 0x4, 0x9, 0x9, 0xfffffffd, 0x8, 0x0, 0xc000, 0x8, 0xee00, 0xee01, 0x7, 0x101}}, {0x6, 0x6, 0x2, 0x8, '!%'}}]}, 0x150) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r4}}, './file0\x00'}) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f00000023c0), 0x4) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r9, 0x10000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) (async) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) (async) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) (async) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x150, 0x0, r3, [{{0x3, 0x3, 0x8, 0x8, 0x3, 0x40, {0x0, 0x6, 0x2, 0x2e600296, 0x7, 0x9, 0x80000001, 0x6, 0x0, 0x2000, 0x6e1, r6, r7, 0x0, 0x2}}, {0x6, 0xfab4, 0x1, 0x40, '#'}}, {{0x2, 0x3, 0x80000001, 0x6, 0xff, 0x9, {0x1, 0x4, 0x101, 0x4, 0x9, 0x9, 0xfffffffd, 0x8, 0x0, 0xc000, 0x8, 0xee00, 0xee01, 0x7, 0x101}}, {0x6, 0x6, 0x2, 0x8, '!%'}}]}, 0x150) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r4}}, './file0\x00'}) (async) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f00000023c0), 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r9, 0x10000000) (async) 08:31:57 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48040}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 08:31:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="402150932800000000000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250300000008003c00370b000008003c009d00000008002c0002000000060028000000000005002f000000000005002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@obj_user={'obj_user', 0x3d, '\xf6}'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@pcr={'pcr', 0x3d, 0x35}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_type}]}}) 08:31:57 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) socket$inet6_dccp(0xa, 0x6, 0x0) 08:31:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xd04, 0x1, 0x5, 0xb0, 0x1, 0x400, '\x00', 0x0, r0, 0x2, 0x4, 0x4, 0x8}, 0x48) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000001c0)=""/67, &(0x7f0000000240)=0x43) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000380)={0x81, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:31:57 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48040}, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 08:31:57 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) setsockopt$RDS_CONG_MONITOR(r2, 0x114, 0x6, &(0x7f0000000040)=0x8, 0x4) socketpair(0x0, 0x1, 0x3, &(0x7f0000000000)) (async) socketpair(0x0, 0x1, 0x3, &(0x7f0000000000)) 08:31:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="402150932800000000000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250300000008003c00370b000008003c009d00000008002c0002000000060028000000000005002f000000000005002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@obj_user={'obj_user', 0x3d, '\xf6}'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@pcr={'pcr', 0x3d, 0x35}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_type}]}}) (async) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@obj_user={'obj_user', 0x3d, '\xf6}'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@pcr={'pcr', 0x3d, 0x35}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_type}]}}) 08:31:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) getresgid(&(0x7f0000000080)=0x0, &(0x7f0000000100), &(0x7f0000000140)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x150, 0x0, r3, [{{0x3, 0x3, 0x8, 0x8, 0x3, 0x40, {0x0, 0x6, 0x2, 0x2e600296, 0x7, 0x9, 0x80000001, 0x6, 0x0, 0x2000, 0x6e1, r6, r7, 0x0, 0x2}}, {0x6, 0xfab4, 0x1, 0x40, '#'}}, {{0x2, 0x3, 0x80000001, 0x6, 0xff, 0x9, {0x1, 0x4, 0x101, 0x4, 0x9, 0x9, 0xfffffffd, 0x8, 0x0, 0xc000, 0x8, 0xee00, 0xee01, 0x7, 0x101}}, {0x6, 0x6, 0x2, 0x8, '!%'}}]}, 0x150) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r4}}, './file0\x00'}) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f00000023c0), 0x4) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r9, 0x10000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) (async) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x0, 0xee01}}, './file0\x00'}) (async) getresgid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140)) (async) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000180)={0x150, 0x0, r3, [{{0x3, 0x3, 0x8, 0x8, 0x3, 0x40, {0x0, 0x6, 0x2, 0x2e600296, 0x7, 0x9, 0x80000001, 0x6, 0x0, 0x2000, 0x6e1, r6, r7, 0x0, 0x2}}, {0x6, 0xfab4, 0x1, 0x40, '#'}}, {{0x2, 0x3, 0x80000001, 0x6, 0xff, 0x9, {0x1, 0x4, 0x101, 0x4, 0x9, 0x9, 0xfffffffd, 0x8, 0x0, 0xc000, 0x8, 0xee00, 0xee01, 0x7, 0x101}}, {0x6, 0x6, 0x2, 0x8, '!%'}}]}, 0x150) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r5, 0xc018937b, &(0x7f0000002380)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r4}}, './file0\x00'}) (async) setsockopt$RDS_RECVERR(r8, 0x114, 0x5, &(0x7f00000023c0), 0x4) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000000)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r9, 0x10000000) (async) 08:31:57 executing program 5: socketpair(0x2, 0x3, 0x1, &(0x7f0000000040)) 08:31:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xd04, 0x1, 0x5, 0xb0, 0x1, 0x400, '\x00', 0x0, r0, 0x2, 0x4, 0x4, 0x8}, 0x48) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x80) (async) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000001c0)=""/67, &(0x7f0000000240)=0x43) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000380)={0x81, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:31:57 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_SIGNAL_INFO(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3f2, 0x0, 0x70bd28, 0x25dfdbfc, "", ["", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x48040}, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) 08:31:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r1, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="402150932800000000000000", @ANYRES16=0x0, @ANYBLOB="10002dbd7000ffdbdf250300000008003c00370b000008003c009d00000008002c0002000000060028000000000005002f000000000005002d0000000000"], 0x44}, 0x1, 0x0, 0x0, 0x4081}, 0x4000000) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@obj_user={'obj_user', 0x3d, '\xf6}'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@pcr={'pcr', 0x3d, 0x35}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_type}]}}) (async) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={{}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {'user_id', 0x3d, 0xffffffffffffffff}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x3}}, {@blksize}, {@blksize={'blksize', 0x3d, 0xc00}}, {@max_read={'max_read', 0x3d, 0x8001}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@obj_user={'obj_user', 0x3d, '\xf6}'}}, {@pcr={'pcr', 0x3d, 0x2a}}, {@pcr={'pcr', 0x3d, 0x35}}, {@euid_eq={'euid', 0x3d, 0xffffffffffffffff}}, {@subj_type}]}}) 08:31:57 executing program 5: socketpair(0x2, 0x3, 0x1, &(0x7f0000000040)) 08:31:57 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xd04, 0x1, 0x5, 0xb0, 0x1, 0x400, '\x00', 0x0, r0, 0x2, 0x4, 0x4, 0x8}, 0x48) (async) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3e8, 0x400, 0x70bd25, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x8000}, 0x80) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f00000001c0)=""/67, &(0x7f0000000240)=0x43) ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000380)={0x81, 0x3, &(0x7f0000000280)=[0x0, 0x0, 0x0], &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 08:31:57 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0xa) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0xfff, 0x101, 0x800, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/95, 0x5f}, &(0x7f00000000c0), 0x20}, 0x20) 08:31:57 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0xd9f4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x200, 0x5, 0x4000}) 08:31:57 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff, 0x80000}) write$FUSE_DIRENT(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8001000000000000", @ANYRES64=0x0, @ANYBLOB="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"], 0x180) socketpair(0xa, 0x0, 0x400, &(0x7f0000000080)) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) 08:31:58 executing program 5: socketpair(0x2, 0x3, 0x1, &(0x7f0000000040)) socketpair(0x2, 0x3, 0x1, &(0x7f0000000040)) (async) 08:31:58 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@in6={0xa, 0x4e24, 0x7a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, {&(0x7f0000000440)}, &(0x7f0000000480), 0x14}, 0xa0) syz_open_procfs$userns(r2, &(0x7f0000002040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair(0x26, 0x0, 0xc2, &(0x7f0000000080)) syz_io_uring_setup(0x383d, &(0x7f0000000180)={0x0, 0x88cd, 0x80, 0x2, 0x2ee, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x120, 0x1}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r7, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x876}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004084}, 0x20004054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000040)={r4, r6, 0x80}) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x6, r1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 08:31:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x20) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002040)={0xa0, 0x0, r1, {{0x4, 0x0, 0x47, 0x400, 0x800, 0x5, {0x3, 0x6, 0x7, 0xa164, 0xad6, 0x5, 0x63d, 0x1ff, 0x2, 0xa000, 0x2, 0xee00, 0x0, 0x8, 0x80000000}}}}, 0xa0) 08:31:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0xd9f4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x200, 0x5, 0x4000}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0xd9f4}}, './file0\x00'}) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x200, 0x5, 0x4000}) (async) 08:31:58 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff, 0x80000}) write$FUSE_DIRENT(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8001000000000000", @ANYRES64=0x0, @ANYBLOB="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"], 0x180) socketpair(0xa, 0x0, 0x400, &(0x7f0000000080)) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) 08:31:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0xa) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0xfff, 0x101, 0x800, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/95, 0x5f}, &(0x7f00000000c0), 0x20}, 0x20) 08:31:58 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@ax25={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, {&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x20}, 0xa0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="050000ff000100000008003a000000000005002d0000000000050038000100"/48], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8018) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001800)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x3, 0x2, 0x0, 0x2}}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f00000017c0), 0x15}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 08:31:58 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@in6={0xa, 0x4e24, 0x7a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, {&(0x7f0000000440)}, &(0x7f0000000480), 0x14}, 0xa0) (async) syz_open_procfs$userns(r2, &(0x7f0000002040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair(0x26, 0x0, 0xc2, &(0x7f0000000080)) (async) syz_io_uring_setup(0x383d, &(0x7f0000000180)={0x0, 0x88cd, 0x80, 0x2, 0x2ee, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x120, 0x1}, 0x2) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (rerun: 64) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) (rerun: 32) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r7, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x876}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004084}, 0x20004054) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) (async) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000040)={r4, r6, 0x80}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x6, r1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 08:31:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x20) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002040)={0xa0, 0x0, r1, {{0x4, 0x0, 0x47, 0x400, 0x800, 0x5, {0x3, 0x6, 0x7, 0xa164, 0xad6, 0x5, 0x63d, 0x1ff, 0x2, 0xa000, 0x2, 0xee00, 0x0, 0x8, 0x80000000}}}}, 0xa0) 08:31:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) bind$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x80}, 0xa) (async) ioctl$vim2m_VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000140)={0x1, 0xfff, 0x101, 0x800, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000180)) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000100)={{&(0x7f0000000040)=""/95, 0x5f}, &(0x7f00000000c0), 0x20}, 0x20) 08:31:58 executing program 0: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000000)={0x8000000000000001, 0xffffffffffffffff, 0x80000}) write$FUSE_DIRENT(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="8001000000000000", @ANYRES64=0x0, @ANYBLOB="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"], 0x180) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000080)) (async) syz_open_dev$swradio(&(0x7f0000000040), 0x0, 0x2) 08:31:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2, 0xd9f4}}, './file0\x00'}) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x1, 0x200, 0x5, 0x4000}) 08:31:58 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@ax25={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, {&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x20}, 0xa0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="050000ff000100000008003a000000000005002d0000000000050038000100"/48], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8018) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001800)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x3, 0x2, 0x0, 0x2}}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f00000017c0), 0x15}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 08:31:58 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000000)={0x2020, 0x0, 0x0}, 0x2020) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) mmap$binder(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x20) (async) write$FUSE_CREATE_OPEN(r0, &(0x7f0000002040)={0xa0, 0x0, r1, {{0x4, 0x0, 0x47, 0x400, 0x800, 0x5, {0x3, 0x6, 0x7, 0xa164, 0xad6, 0x5, 0x63d, 0x1ff, 0x2, 0xa000, 0x2, 0xee00, 0x0, 0x8, 0x80000000}}}}, 0xa0) 08:31:58 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgid(0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@in6={0xa, 0x4e24, 0x7a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, {&(0x7f0000000440)}, &(0x7f0000000480), 0x14}, 0xa0) syz_open_procfs$userns(r2, &(0x7f0000002040)) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socketpair(0x26, 0x0, 0xc2, &(0x7f0000000080)) syz_io_uring_setup(0x383d, &(0x7f0000000180)={0x0, 0x88cd, 0x80, 0x2, 0x2ee, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000240)) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x120, 0x1}, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r7, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x876}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004084}, 0x20004054) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000040)={r4, r6, 0x80}) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x6, r1, 0x1}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) getpgid(0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000400)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f00000004c0)={@in6={0xa, 0x4e24, 0x7a, @private0={0xfc, 0x0, '\x00', 0x1}, 0x6}, {&(0x7f0000000440)}, &(0x7f0000000480), 0x14}, 0xa0) (async) syz_open_procfs$userns(r2, &(0x7f0000002040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) socketpair(0x26, 0x0, 0xc2, &(0x7f0000000080)) (async) syz_io_uring_setup(0x383d, &(0x7f0000000180)={0x0, 0x88cd, 0x80, 0x2, 0x2ee, 0x0, r4}, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000200), &(0x7f0000000240)) (async) syz_io_uring_submit(r5, 0x0, &(0x7f0000000280)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x120, 0x1}, 0x2) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r4) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000680)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x4c, r7, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xfffffffe}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x6}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x8}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x8080) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x876}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004084}, 0x20004054) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) (async) kcmp$KCMP_EPOLL_TFD(r2, 0xffffffffffffffff, 0x7, r0, &(0x7f0000000040)={r4, r6, 0x80}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f0000000100)={0x6, r1, 0x1}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r8, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r6}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000006c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r10, 0xc018937b, &(0x7f0000000700)={{0x1, 0x1, 0x18, r9, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) 08:31:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7, 0x5}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x10}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:31:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:31:58 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) 08:31:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7, 0x5}}, './file0\x00'}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x10}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:31:58 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@ax25={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, {&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x20}, 0xa0) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="050000ff000100000008003a000000000005002d0000000000050038000100"/48], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8018) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001800)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x3, 0x2, 0x0, 0x2}}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f00000017c0), 0x15}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 08:31:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:31:58 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8001, &(0x7f00000000c0)={[0xbe62]}, 0x8) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:31:58 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) 08:31:58 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) socket$inet_udplite(0x2, 0x2, 0x88) 08:31:58 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x7, 0x5}}, './file0\x00'}) (async, rerun: 64) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async, rerun: 64) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r3, &(0x7f0000000100)={0x10}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 64) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 64) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:31:58 executing program 5: socketpair(0x26, 0x800, 0x72, &(0x7f0000000000)) 08:31:58 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8001, &(0x7f00000000c0)={[0xbe62]}, 0x8) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:31:58 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) 08:31:58 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) 08:31:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) (async) ioctl$KVM_CAP_EXCEPTION_PAYLOAD(r0, 0x4068aea3, &(0x7f0000000000)={0xa4, 0x0, 0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:31:58 executing program 2: epoll_pwait(0xffffffffffffffff, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, 0x8001, &(0x7f00000000c0)={[0xbe62]}, 0x8) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:31:58 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x60, &(0x7f0000000080)=""/96, 0x82000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x8, 0x101}, 0x10}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0xf0, 0x1, 0x6, 0x101, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 08:31:58 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e22, @multicast2}, 0x10) (async) 08:31:58 executing program 5: socketpair(0x26, 0x800, 0x72, &(0x7f0000000000)) 08:31:58 executing program 0: socketpair(0xa, 0x4, 0x400, &(0x7f0000000000)) 08:31:58 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01110000000000002e2f66696c00c3c05983331b63dc109df7041fdca227da3966068f1d0be8a73d3130166d64a62c680f40afac0e56e3d7d4a0b5b9014dfe909fb710dd2bc2697bf3586fc1e186e5eea173e5e220627cfb0f05e3dd51776f971306fa7f12fc858a1af4aaf2fe14053f07c26ad979a0270fc24beea10476a4266b26252db4ca7419d230030000000000000044ed970c89dad95d1ce0fa020000ab339ac61d21116e7007"]) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000004340)={0x90, 0x0, r4, {0x5, 0x1, 0x71f, 0x2, 0xd5, 0xfffffe00, {0x2, 0x1, 0x7fff, 0x7, 0x9, 0xa15, 0xac9c, 0x7, 0x7, 0x3000, 0x9, 0xee00, r5, 0x0, 0x2}}}, 0x90) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={[0x5]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) sched_rr_get_interval(0x0, &(0x7f00000001c0)) 08:31:58 executing program 5: socketpair(0x26, 0x800, 0x72, &(0x7f0000000000)) 08:31:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) (async) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x60, &(0x7f0000000080)=""/96, 0x82000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x8, 0x101}, 0x10}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0xf0, 0x1, 0x6, 0x101, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 08:31:59 executing program 1: socketpair(0x2a, 0x2, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = getpgid(0xffffffffffffffff) r4 = getpgid(0x0) syz_open_procfs$userns(r4, &(0x7f0000002040)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000500)={r5, r6, 0x3}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="01001700", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$can_j1939(0x1d, 0x2, 0x7) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xb5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @jmp={0x5, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}], &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0xf4, &(0x7f00000002c0)=""/244, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x0, 0x1000}, 0x10}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, r9, 0xfffffffd, 0x3}, {&(0x7f0000000580)=""/170, 0xaa}, &(0x7f0000000100), 0x1}, 0xa0) 08:31:59 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 08:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01110000000000002e2f66696c00c3c05983331b63dc109df7041fdca227da3966068f1d0be8a73d3130166d64a62c680f40afac0e56e3d7d4a0b5b9014dfe909fb710dd2bc2697bf3586fc1e186e5eea173e5e220627cfb0f05e3dd51776f971306fa7f12fc858a1af4aaf2fe14053f07c26ad979a0270fc24beea10476a4266b26252db4ca7419d230030000000000000044ed970c89dad95d1ce0fa020000ab339ac61d21116e7007"]) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) (async) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) (async) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000004340)={0x90, 0x0, r4, {0x5, 0x1, 0x71f, 0x2, 0xd5, 0xfffffe00, {0x2, 0x1, 0x7fff, 0x7, 0x9, 0xa15, 0xac9c, 0x7, 0x7, 0x3000, 0x9, 0xee00, r5, 0x0, 0x2}}}, 0x90) (async) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={[0x5]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) sched_rr_get_interval(0x0, &(0x7f00000001c0)) 08:31:59 executing program 0: socketpair(0xa, 0x4, 0x400, &(0x7f0000000000)) socketpair(0xa, 0x4, 0x400, &(0x7f0000000000)) (async) 08:31:59 executing program 5: socketpair(0x2c, 0x3, 0x1f, &(0x7f0000000000)) 08:31:59 executing program 1: socketpair(0x2a, 0x2, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) getpgid(0xffffffffffffffff) (async) r3 = getpgid(0xffffffffffffffff) getpgid(0x0) (async) r4 = getpgid(0x0) syz_open_procfs$userns(r4, &(0x7f0000002040)) (async) syz_open_procfs$userns(r4, &(0x7f0000002040)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000500)={r5, r6, 0x3}) (async) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000500)={r5, r6, 0x3}) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="01001700", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$can_j1939(0x1d, 0x2, 0x7) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xb5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @jmp={0x5, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}], &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0xf4, &(0x7f00000002c0)=""/244, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x0, 0x1000}, 0x10}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, r9, 0xfffffffd, 0x3}, {&(0x7f0000000580)=""/170, 0xaa}, &(0x7f0000000100), 0x1}, 0xa0) 08:31:59 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0, {0x101}}, './file0\x00'}) (rerun: 64) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x2, &(0x7f0000000000)=@raw=[@map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x2}], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x60, &(0x7f0000000080)=""/96, 0x82000, 0x17, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000140)={0x3, 0xb, 0x8, 0x101}, 0x10}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x1a, 0xf0, 0x1, 0x6, 0x101, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x5}, 0x48) 08:31:59 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 08:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01110000000000002e2f66696c00c3c05983331b63dc109df7041fdca227da3966068f1d0be8a73d3130166d64a62c680f40afac0e56e3d7d4a0b5b9014dfe909fb710dd2bc2697bf3586fc1e186e5eea173e5e220627cfb0f05e3dd51776f971306fa7f12fc858a1af4aaf2fe14053f07c26ad979a0270fc24beea10476a4266b26252db4ca7419d230030000000000000044ed970c89dad95d1ce0fa020000ab339ac61d21116e7007"]) (async) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) (async) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000004340)={0x90, 0x0, r4, {0x5, 0x1, 0x71f, 0x2, 0xd5, 0xfffffe00, {0x2, 0x1, 0x7fff, 0x7, 0x9, 0xa15, 0xac9c, 0x7, 0x7, 0x3000, 0x9, 0xee00, r5, 0x0, 0x2}}}, 0x90) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={[0x5]}, 0x8) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) sched_rr_get_interval(0x0, &(0x7f00000001c0)) 08:31:59 executing program 0: socketpair(0xa, 0x4, 0x400, &(0x7f0000000000)) 08:31:59 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) (async) 08:31:59 executing program 5: socketpair(0x2c, 0x3, 0x1f, &(0x7f0000000000)) 08:31:59 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9ad}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00', 0xa6e, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r4, r2]}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x74bebc2be0681b0b, 0x7, 0x6, 0x4816, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x68, 0x0, 0x4f, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x2, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0xf, 0xb8, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 08:31:59 executing program 1: socketpair(0x2a, 0x2, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000540)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) r3 = getpgid(0xffffffffffffffff) (async) r4 = getpgid(0x0) syz_open_procfs$userns(r4, &(0x7f0000002040)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000500)={r5, r6, 0x3}) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000200)=ANY=[@ANYBLOB="01001700", @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000240)=@raw=[@call={0x85, 0x0, 0x0, 0xb5}, @map_idx={0x18, 0xb, 0x5, 0x0, 0x6}, @jmp={0x5, 0x1, 0x0, 0x7, 0xb, 0xfffffffffffffffc, 0xfffffffffffffff0}, @map_fd={0x18, 0x4, 0x1, 0x0, r8}], &(0x7f0000000280)='syzkaller\x00', 0x80000001, 0xf4, &(0x7f00000002c0)=""/244, 0x41100, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x5, 0x0, 0x1000}, 0x10}, 0x80) ioctl$IOCTL_GET_NCIDEV_IDX(r2, 0x0, &(0x7f0000000040)=0x0) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000140)={@nfc={0x27, r9, 0xfffffffd, 0x3}, {&(0x7f0000000580)=""/170, 0xaa}, &(0x7f0000000100), 0x1}, 0xa0) 08:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10000000}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2b, 0x6, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8040) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x300000c, 0x10010, r0, 0x10000000) 08:31:59 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) 08:31:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/249, &(0x7f0000000140)=0xf9) socketpair(0x1d, 0x800, 0x7a2, &(0x7f0000000180)) 08:31:59 executing program 5: socketpair(0x2c, 0x3, 0x1f, &(0x7f0000000000)) 08:31:59 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9ad}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00', 0xa6e, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r4, r2]}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x74bebc2be0681b0b, 0x7, 0x6, 0x4816, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x68, 0x0, 0x4f, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x2, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0xf, 0xb8, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 08:31:59 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) 08:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10000000}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2b, 0x6, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async, rerun: 32) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x300000c, 0x10010, r0, 0x10000000) (rerun: 32) 08:31:59 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/249, &(0x7f0000000140)=0xf9) socketpair(0x1d, 0x800, 0x7a2, &(0x7f0000000180)) 08:31:59 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:31:59 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2000c840) 08:31:59 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9ad}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00', 0xa6e, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r4, r2]}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x74bebc2be0681b0b, 0x7, 0x6, 0x4816, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x68, 0x0, 0x4f, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x2, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0xf, 0xb8, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x74bebc2be0681b0b, 0x7, 0x6, 0x4816, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x68, 0x0, 0x4f, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x2, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0xf, 0xb8, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 08:31:59 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) 08:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, &(0x7f0000000000)={0x10000000}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, 0x0, 0x200, 0x70bd2b, 0x6, {}, [@BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8040) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x300000c, 0x10010, r0, 0x10000000) 08:31:59 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2000c840) 08:31:59 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) 08:31:59 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/249, &(0x7f0000000140)=0xf9) socketpair(0x1d, 0x800, 0x7a2, &(0x7f0000000180)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/249, &(0x7f0000000140)=0xf9) (async) socketpair(0x1d, 0x800, 0x7a2, &(0x7f0000000180)) (async) 08:31:59 executing program 0: syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0) socketpair(0x1d, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="010400000100000018000000f1496f24c90835efbb3b812b02bac158faeccce58c7e06bb994225e38441f6e6f99ef69e081052ff7e551b8ed73e8e96fd2e5428408132fe65a86be36b7ff8741a183806001a", @ANYRES32=r4, @ANYRES64=r4, @ANYRES32=r1, @ANYRES64=r0]) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x19}) 08:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000002480)={0x60, 0x0, r4}, 0x60) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x68, 0x0, r4, [{0x3, 0x7fff, 0x7, 0x704e, '-&+-&/,'}, {0x5, 0x2, 0x1f, 0xffff, '/sys/kernel/debug/binder/state\x00'}]}, 0x68) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:31:59 executing program 4: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}, 0xa) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0xffffffffffffff9b) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4, 0x1}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)=ANY=[]) 08:31:59 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2000c840) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20044001}, 0x2000c840) (async) 08:31:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000020c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000002100)={r0, r2, 0x735e9dd5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xd19, 0x381}}, './file1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f0000002080)={0x28, 0xffffffffffffffda, r4, {{0x3, 0x400, 0x2, 0xffffffffffffffff}}}, 0x28) 08:31:59 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:31:59 executing program 4: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}, 0xa) (async) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0xffffffffffffff9b) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4, 0x1}}, './file0\x00'}) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)=ANY=[]) 08:31:59 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000002480)={0x60, 0x0, r4}, 0x60) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x68, 0x0, r4, [{0x3, 0x7fff, 0x7, 0x704e, '-&+-&/,'}, {0x5, 0x2, 0x1f, 0xffff, '/sys/kernel/debug/binder/state\x00'}]}, 0x68) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:31:59 executing program 5: socketpair(0x18, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) 08:31:59 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000020c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000002100)={r0, r2, 0x735e9dd5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xd19, 0x381}}, './file1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f0000002080)={0x28, 0xffffffffffffffda, r4, {{0x3, 0x400, 0x2, 0xffffffffffffffff}}}, 0x28) 08:32:00 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="110000000100000022324a92", @ANYRES32=r0, @ANYBLOB="4e6e62a1c9fff03309de3d0004"]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0xffffffffffffffda, 0x0, {{0x4, 0x400, 0x2}}}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 08:32:00 executing program 0: syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0) (async) socketpair(0x1d, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="010400000100000018000000f1496f24c90835efbb3b812b02bac158faeccce58c7e06bb994225e38441f6e6f99ef69e081052ff7e551b8ed73e8e96fd2e5428408132fe65a86be36b7ff8741a183806001a", @ANYRES32=r4, @ANYRES64=r4, @ANYRES32=r1, @ANYRES64=r0]) (async) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x19}) [ 1582.789791][T12184] can: request_module (can-proto-4) failed. 08:32:00 executing program 2: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f00000020c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r0, &(0x7f0000002100)={r0, r2, 0x735e9dd5}) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xd19, 0x381}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {0xd19, 0x381}}, './file1\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_LK(r3, &(0x7f0000002080)={0x28, 0xffffffffffffffda, r4, {{0x3, 0x400, 0x2, 0xffffffffffffffff}}}, 0x28) 08:32:00 executing program 5: socketpair(0x18, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) 08:32:00 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000180)={0x81, 0x0, 0x3}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000002480)={0x60, 0x0, r4}, 0x60) write$FUSE_DIRENT(r0, &(0x7f0000000040)={0x68, 0x0, r4, [{0x3, 0x7fff, 0x7, 0x704e, '-&+-&/,'}, {0x5, 0x2, 0x1f, 0xffff, '/sys/kernel/debug/binder/state\x00'}]}, 0x68) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:00 executing program 4: connect$bt_rfcomm(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x1f}, 0xa) (async) socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) getsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r3, 0x0, 0x0}, 0xffffffffffffff9b) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000080)={{0x1, 0x1, 0x18, r2, {0x4, 0x1}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)=ANY=[]) 08:32:00 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="110000000100000022324a92", @ANYRES32=r0, @ANYBLOB="4e6e62a1c9fff03309de3d0004"]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0xffffffffffffffda, 0x0, {{0x4, 0x400, 0x2}}}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 08:32:00 executing program 5: socketpair(0x18, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair(0x18, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x1}, 0xa) 08:32:00 executing program 2: socketpair(0x2b, 0x80a, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80404}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) [ 1582.947867][T12217] can: request_module (can-proto-4) failed. 08:32:00 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffffa}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:00 executing program 0: syz_open_dev$MSR(&(0x7f0000000040), 0x2, 0x0) (async) socketpair(0x1d, 0x6, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000180)=ANY=[@ANYBLOB="010400000100000018000000f1496f24c90835efbb3b812b02bac158faeccce58c7e06bb994225e38441f6e6f99ef69e081052ff7e551b8ed73e8e96fd2e5428408132fe65a86be36b7ff8741a183806001a", @ANYRES32=r4, @ANYRES64=r4, @ANYRES32=r1, @ANYRES64=r0]) (async) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x19}) 08:32:00 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="110000000100000022324a92", @ANYRES32=r0, @ANYBLOB="4e6e62a1c9fff03309de3d0004"]) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000000c0)) write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0xffffffffffffffda, 0x0, {{0x4, 0x400, 0x2}}}, 0x28) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) 08:32:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="7adda817111bd6932e2f69696c507400b23cfea4c3904205049cdff6b23f64a964cc88de98158e962ea0fdff0bb56aa39287f46c697bad4a34de08a1952f3a42a6c41886bbd67677308d69c9bf5a4ba4dfd2e54d1b5a92ffbab438a4584bb7bd4ed4b573837db12c7749297aca609e3f0897c33ef6e80f397139f77e43ec22f9c1f064f33639d44eb3cc6828270d013d2aa3efc7112b4fd845cb1e4f7dca27b9afebe1f09bd72cd2035952f17eda19cc21a9ed5937e90e5cddbaafdce53a686adc8dc94782725e183a0b15fff9197724eb09dc117cc910d300000000000000000014000000000001c0c99a83c486869cae6c57a0b8c6094e33fdf99f81d8961629f6561b5228ff4420a58c4c98a1c0bff2db59b9d35d3a2e5c8c1a57a0946ec3ec44cc7bfaaf85fc0317027c1146f866a611dedd35d888747a5d94332f2b710147eb9520d86b7314ebc54431c4d42f57f603498520810e5d7d634304f96319d2dc60180556bcbf01fa521b32a9b42247d0a9f1dbf1ca2d09390754b9f668e2285b210beec28aa18ae0bc745344da6a880bfdfd5f24eee26abbe2ad08fa8176e0ef52a6b6a6faa3900e82a1"]) 08:32:00 executing program 5: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3e, 0x2}) socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200}}, './file1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$msr(r2, &(0x7f00000007c0)=""/4096, 0x1000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffd2e, r1}, './file0\x00'}) 08:32:00 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffffa}}, './file0\x00'}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:00 executing program 2: socketpair(0x2b, 0x80a, 0x0, &(0x7f0000000000)) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80404}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 08:32:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x28, 0x3, 0xfffffeff, &(0x7f0000000000)) [ 1583.167271][T12245] can: request_module (can-proto-4) failed. 08:32:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) 08:32:00 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:00 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r0, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xfffffffffffffffa}}, './file0\x00'}) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (rerun: 64) 08:32:00 executing program 5: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3e, 0x2}) socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200}}, './file1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$msr(r2, &(0x7f00000007c0)=""/4096, 0x1000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffd2e, r1}, './file0\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3e, 0x2}) (async) socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200}}, './file1\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) read$msr(r2, &(0x7f00000007c0)=""/4096, 0x1000) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffd2e, r1}, './file0\x00'}) (async) 08:32:00 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x28, 0x3, 0xfffffeff, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) socketpair(0x28, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) 08:32:00 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="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"]) (async) 08:32:00 executing program 2: socketpair(0x2b, 0x80a, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80404}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd28, 0x25dfdbfd, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x3}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x8800) 08:32:00 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x10000000) 08:32:00 executing program 5: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3e, 0x2}) socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200}}, './file1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$msr(r2, &(0x7f00000007c0)=""/4096, 0x1000) (async) read$msr(r2, &(0x7f00000007c0)=""/4096, 0x1000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffd2e, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffd2e, r1}, './file0\x00'}) 08:32:00 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) 08:32:00 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair(0x28, 0x3, 0xfffffeff, &(0x7f0000000000)) 08:32:00 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 08:32:00 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x10000000) 08:32:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000180)=0x9, 0x4) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000001c0)=""/159, &(0x7f0000000280)=0x9f) syz_io_uring_setup(0x3959, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:00 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x9, 0x71}, 0x41}, 0x10) 08:32:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) socketpair(0x10, 0x1d758a17ac7cf766, 0x0, &(0x7f0000000000)) 08:32:00 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}}, 0x4000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000fa7fd80ccecddca56536e655906fe30dde6f0018", @ANYRES32=r2, @ANYBLOB="03000000000000002e2f66696c653000"]) 08:32:00 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r1, 0x10000000) 08:32:00 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) 08:32:00 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x9, 0x71}, 0x41}, 0x10) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x9, 0x71}, 0x41}, 0x10) (async) 08:32:00 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) socketpair(0x10, 0x1d758a17ac7cf766, 0x0, &(0x7f0000000000)) 08:32:00 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}}, 0x4000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000fa7fd80ccecddca56536e655906fe30dde6f0018", @ANYRES32=r2, @ANYBLOB="03000000000000002e2f66696c653000"]) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}}, 0x4000000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000fa7fd80ccecddca56536e655906fe30dde6f0018", @ANYRES32=r2, @ANYBLOB="03000000000000002e2f66696c653000"]) (async) 08:32:00 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000180)=0x9, 0x4) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000001c0)=""/159, &(0x7f0000000280)=0x9f) syz_io_uring_setup(0x3959, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000180)=0x9, 0x4) (async) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000001c0)=""/159, &(0x7f0000000280)=0x9f) (async) syz_io_uring_setup(0x3959, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) 08:32:01 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x202003, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) 08:32:01 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$KVM_CAP_X2APIC_API(r0, 0x4068aea3, &(0x7f0000000080)={0x81, 0x0, 0x1}) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000040)) (async) socketpair(0x10, 0x1d758a17ac7cf766, 0x0, &(0x7f0000000000)) 08:32:01 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f0000000040)={{0x9, 0x71}, 0x41}, 0x10) 08:32:01 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async, rerun: 32) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) (rerun: 32) 08:32:01 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}}, 0x4000000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000fa7fd80ccecddca56536e655906fe30dde6f0018", @ANYRES32=r2, @ANYBLOB="03000000000000002e2f66696c653000"]) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_SET_FEATURE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x20, 0x3fa, 0x2, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x0, 0x1}, ["", "", "", "", "", ""]}, 0x20}}, 0x4000000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r1, 0xc01064c2, &(0x7f0000000040)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000010000fa7fd80ccecddca56536e655906fe30dde6f0018", @ANYRES32=r2, @ANYBLOB="03000000000000002e2f66696c653000"]) (async) 08:32:01 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x202003, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) 08:32:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x512c0ef7300de02d, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x500000}) 08:32:01 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x2, 0xf0, 0x4}}, 0x18) 08:32:01 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 08:32:01 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000180)=0x9, 0x4) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000001c0)=""/159, &(0x7f0000000280)=0x9f) syz_io_uring_setup(0x3959, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) setsockopt$inet6_dccp_int(r0, 0x21, 0x4, &(0x7f0000000180)=0x9, 0x4) (async) getsockopt$inet6_dccp_buf(r0, 0x21, 0xc0, &(0x7f00000001c0)=""/159, &(0x7f0000000280)=0x9f) (async) syz_io_uring_setup(0x3959, &(0x7f0000000040)={0x0, 0x0, 0x20, 0x0, 0x0, 0x0, r0}, &(0x7f0000fe9000/0x14000)=nil, &(0x7f0000ff4000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) 08:32:01 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) getsockopt$inet6_dccp_int(r0, 0x21, 0x6, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x202003, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x2}) 08:32:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x512c0ef7300de02d, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x500000}) socket$inet_sctp(0x2, 0x512c0ef7300de02d, 0x84) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x500000}) (async) 08:32:01 executing program 1: socketpair(0x3, 0x3, 0xfffffeff, &(0x7f0000000000)) 08:32:01 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x2, 0xf0, 0x4}}, 0x18) 08:32:01 executing program 1: socketpair(0x3, 0x3, 0xfffffeff, &(0x7f0000000000)) socketpair(0x3, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) 08:32:01 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xfffffffc, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4, 0x7f}}, 0x30) 08:32:01 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) 08:32:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x512c0ef7300de02d, 0x84) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, r1, &(0x7f0000000000)={0xffffffffffffffff, r0, 0x500000}) 08:32:01 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000140)={0x280, 0x800, 0x556, 0x78, 0x0, 0x4, 0x10, 0x2, {0x7fffffff, 0x6, 0x1}, {0x9, 0xfffffab9}, {0x6, 0x841, 0x1}, {0x2, 0x1}, 0x3, 0x100, 0x40, 0x7, 0x0, 0xcdc6, 0x5, 0x0, 0x8001, 0x86, 0x8, 0xb5c2, 0x26, 0x4, 0x2, 0x7}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0xffffffffffffffda, r2, {{0x9, 0x1, 0x9, 0x7, 0x7fff, 0xa, 0x7, 0x5}}}, 0x60) 08:32:01 executing program 1: socketpair(0x3, 0x3, 0xfffffeff, &(0x7f0000000000)) 08:32:01 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0, 0x8, &(0x7f0000000100)=[{}], 0x8, 0x10, &(0x7f0000000140), &(0x7f0000000380), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x2, {0x2, 0xf0, 0x4}}, 0x18) 08:32:01 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xfffffffc, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4, 0x7f}}, 0x30) 08:32:01 executing program 2: openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 08:32:01 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000140)={0x280, 0x800, 0x556, 0x78, 0x0, 0x4, 0x10, 0x2, {0x7fffffff, 0x6, 0x1}, {0x9, 0xfffffab9}, {0x6, 0x841, 0x1}, {0x2, 0x1}, 0x3, 0x100, 0x40, 0x7, 0x0, 0xcdc6, 0x5, 0x0, 0x8001, 0x86, 0x8, 0xb5c2, 0x26, 0x4, 0x2, 0x7}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0xffffffffffffffda, r2, {{0x9, 0x1, 0x9, 0x7, 0x7fff, 0xa, 0x7, 0x5}}}, 0x60) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000140)={0x280, 0x800, 0x556, 0x78, 0x0, 0x4, 0x10, 0x2, {0x7fffffff, 0x6, 0x1}, {0x9, 0xfffffab9}, {0x6, 0x841, 0x1}, {0x2, 0x1}, 0x3, 0x100, 0x40, 0x7, 0x0, 0xcdc6, 0x5, 0x0, 0x8001, 0x86, 0x8, 0xb5c2, 0x26, 0x4, 0x2, 0x7}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) (async) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) (async) read$FUSE(r1, &(0x7f0000000200)={0x2020}, 0x2020) (async) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0xffffffffffffffda, r2, {{0x9, 0x1, 0x9, 0x7, 0x7fff, 0xa, 0x7, 0x5}}}, 0x60) (async) 08:32:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0-']) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c0000000500350003000000be744b617f0c149008002c000600000008002c0000000080080039008100000008003a0004000000"], 0x44}}, 0x4000) 08:32:01 executing program 1: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"]) 08:32:01 executing program 5: socketpair(0x2a, 0x6, 0x1, &(0x7f0000000000)) 08:32:01 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000001c0), 0x80, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r2, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1, {0xfffffffc, 0x8}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r4, 0xc0189376, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x3f}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) (async) write$FUSE_NOTIFY_RETRIEVE(r5, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x5, 0x4, 0x7f}}, 0x30) 08:32:01 executing program 2: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 08:32:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0-']) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c0000000500350003000000be744b617f0c149008002c000600000008002c0000000080080039008100000008003a0004000000"], 0x44}}, 0x4000) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0-']) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c0000000500350003000000be744b617f0c149008002c000600000008002c0000000080080039008100000008003a0004000000"], 0x44}}, 0x4000) (async) 08:32:01 executing program 3: ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000140)={0x280, 0x800, 0x556, 0x78, 0x0, 0x4, 0x10, 0x2, {0x7fffffff, 0x6, 0x1}, {0x9, 0xfffffab9}, {0x6, 0x841, 0x1}, {0x2, 0x1}, 0x3, 0x100, 0x40, 0x7, 0x0, 0xcdc6, 0x5, 0x0, 0x8001, 0x86, 0x8, 0xb5c2, 0x26, 0x4, 0x2, 0x7}) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async, rerun: 32) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000000), 0x4) (rerun: 32) ioctl$USBDEVFS_WAIT_FOR_RESUME(r1, 0x5523) (async, rerun: 64) read$FUSE(r1, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) (rerun: 64) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000000040)={0x60, 0xffffffffffffffda, r2, {{0x9, 0x1, 0x9, 0x7, 0x7fff, 0xa, 0x7, 0x5}}}, 0x60) 08:32:01 executing program 1: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01800000008000002e2f66696c653000f8b3724b19c9a160b70ce3b3cc866f363cef8880a0162a9f384c5292533f160bc521eff971249f98eab99a85e2d4ef108104bcf9948a5b192d6c0460e71f2e9839e73137b4bdd55ddb96da65f742fc13c68b65068f4338c962310e617b83a94904d04b1549a2e32ac8762c3216eeeea894fb086dc403f830711e74b9051e94c80dffa2084a52810cca8f3d50016efbd2e999c469e0f5ce56d0a62d6c7d0e2b8afc94320d70fa831dc408218a32c5227fae21e503d6010f6bf65606c59a96da04ce3f728b3a271769c07c33b8e506dfeae824bba0bc58ec8ce1dd03bda630818ecbb662af1aa8b9cd4cec4ea95f3a"]) 08:32:01 executing program 5: socketpair(0x2a, 0x6, 0x1, &(0x7f0000000000)) 08:32:01 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) socketpair(0x6, 0x1, 0x5, &(0x7f0000000040)) socketpair(0x26, 0x5, 0x1000, &(0x7f0000000080)) 08:32:01 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0-']) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c0000000500350003000000be744b617f0c149008002c000600000008002c0000000080080039008100000008003a0004000000"], 0x44}}, 0x4000) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="08002bbd7000fddbdf250c0000000500350003000000be744b617f0c149008002c000600000008002c0000000080080039008100000008003a0004000000"], 0x44}}, 0x4000) 08:32:01 executing program 2: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 08:32:01 executing program 1: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01800000008000002e2f66696c653000f8b3724b19c9a160b70ce3b3cc866f363cef8880a0162a9f384c5292533f160bc521eff971249f98eab99a85e2d4ef108104bcf9948a5b192d6c0460e71f2e9839e73137b4bdd55ddb96da65f742fc13c68b65068f4338c962310e617b83a94904d04b1549a2e32ac8762c3216eeeea894fb086dc403f830711e74b9051e94c80dffa2084a52810cca8f3d50016efbd2e999c469e0f5ce56d0a62d6c7d0e2b8afc94320d70fa831dc408218a32c5227fae21e503d6010f6bf65606c59a96da04ce3f728b3a271769c07c33b8e506dfeae824bba0bc58ec8ce1dd03bda630818ecbb662af1aa8b9cd4cec4ea95f3a"]) 08:32:01 executing program 5: socketpair(0x2a, 0x6, 0x1, &(0x7f0000000000)) 08:32:01 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) socketpair(0x6, 0x1, 0x5, &(0x7f0000000040)) socketpair(0x26, 0x5, 0x1000, &(0x7f0000000080)) (async) socketpair(0x26, 0x5, 0x1000, &(0x7f0000000080)) 08:32:01 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@fowner_lt}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@obj_user={'obj_user', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@uid_gt}]}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r1, 0x10000000) 08:32:01 executing program 2: setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x5}}, './file0\x00'}) 08:32:01 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) 08:32:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@fowner_lt}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@obj_user={'obj_user', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@uid_gt}]}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r1, 0x10000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@fowner_lt}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@obj_user={'obj_user', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@uid_gt}]}}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r1, 0x10000000) (async) 08:32:02 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) socketpair(0x6, 0x1, 0x5, &(0x7f0000000040)) socketpair(0x26, 0x5, 0x1000, &(0x7f0000000080)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) socketpair(0x6, 0x1, 0x5, &(0x7f0000000040)) (async) socketpair(0x26, 0x5, 0x1000, &(0x7f0000000080)) (async) 08:32:02 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:02 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) 08:32:02 executing program 1: r0 = getuid() getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1044080, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootoOde=00000000000000000100000=', @ANYRESDEC=r0, @ANYBLOB='\x00'/10, @ANYRESDEC=r1, @ANYBLOB=',default_permissions,allow_other,blksize=0x0000000000000800,max_read=0x0000000000001000,allow_other,blksize=0x0000000000000000,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',subj_role=]!}\'-(,dont_hash,subj_ser=),fsmagic=0x000000000000000a,\x00']) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) 08:32:02 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x530, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x41, 0x4) 08:32:02 executing program 4: socket$inet_sctp(0x2, 0x1, 0x84) 08:32:02 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[], [{@fowner_lt}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@subj_type={'subj_type', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@obj_user={'obj_user', 0x3d, '/sys/kernel/debug/binder/state\x00'}}, {@uid_gt}]}}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r1, 0x10000000) 08:32:02 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x5) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:02 executing program 1: r0 = getuid() (async) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1044080, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootoOde=00000000000000000100000=', @ANYRESDEC=r0, @ANYBLOB='\x00'/10, @ANYRESDEC=r1, @ANYBLOB=',default_permissions,allow_other,blksize=0x0000000000000800,max_read=0x0000000000001000,allow_other,blksize=0x0000000000000000,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',subj_role=]!}\'-(,dont_hash,subj_ser=),fsmagic=0x000000000000000a,\x00']) (async, rerun: 64) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (rerun: 64) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) (async) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) 08:32:02 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x530, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x530, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x41, 0x4) 08:32:02 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:02 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010100001800000000000000", @ANYRES32=r1, @ANYBLOB="46e60000000000002e2f66696c653000"]) 08:32:02 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, 0x0, 0x530, 0x70bd29, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x7}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80000001}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40080) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0x41, 0x4) 08:32:02 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x5) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x5) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) 08:32:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200480c7}, 0x20000801) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socketpair(0x15, 0x2, 0x7fff, &(0x7f0000000080)) read$fb(r1, &(0x7f0000000300)=""/123, 0x7b) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x468}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) bind$rds(r4, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) ioctl$FBIOBLANK(r3, 0x4611, 0x3) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000200)={0x8, r6, 0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r5, 0x10000000) 08:32:02 executing program 5: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) socketpair(0x10, 0x6, 0xffffff81, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {&(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000140)}, 0xa0) 08:32:02 executing program 1: r0 = getuid() (async) getgroups(0x2, &(0x7f0000000140)=[0x0, 0xffffffffffffffff]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x1044080, &(0x7f0000000180)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootoOde=00000000000000000100000=', @ANYRESDEC=r0, @ANYBLOB='\x00'/10, @ANYRESDEC=r1, @ANYBLOB=',default_permissions,allow_other,blksize=0x0000000000000800,max_read=0x0000000000001000,allow_other,blksize=0x0000000000000000,fowner=', @ANYRESDEC=0xee01, @ANYBLOB=',subj_role=]!}\'-(,dont_hash,subj_ser=),fsmagic=0x000000000000000a,\x00']) (async) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(0xffffffffffffffff, 0xc00464c9, &(0x7f0000000040)) (async, rerun: 32) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) (rerun: 32) 08:32:02 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010100001800000000000000", @ANYRES32=r1, @ANYBLOB="46e60000000000002e2f66696c653000"]) 08:32:02 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0xcb, 0x1f}}, 0x28) 08:32:02 executing program 5: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) (async) socketpair(0x10, 0x6, 0xffffff81, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {&(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000140)}, 0xa0) 08:32:02 executing program 0: syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x5) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_UNLINKAT={0x24, 0x14, 0x0, 0xffffffffffffff9c, 0x0, &(0x7f0000000040)='./file0\x00'}, 0x5) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async, rerun: 64) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200480c7}, 0x20000801) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socketpair(0x15, 0x2, 0x7fff, &(0x7f0000000080)) (async, rerun: 32) read$fb(r1, &(0x7f0000000300)=""/123, 0x7b) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x468}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) bind$rds(r4, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) (async, rerun: 32) ioctl$FBIOBLANK(r3, 0x4611, 0x3) (rerun: 32) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000200)={0x8, r6, 0x1}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r5, 0x10000000) 08:32:02 executing program 1: socketpair(0x26, 0x80000, 0xfffffeff, &(0x7f0000000000)) 08:32:02 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0xcb, 0x1f}}, 0x28) 08:32:02 executing program 5: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) socketpair(0x10, 0x6, 0xffffff81, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {&(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000140)}, 0xa0) 08:32:02 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:32:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200480c7}, 0x20000801) (async) sendmsg$AUDIT_TRIM(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x3f6, 0x2, 0x70bd27, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x200480c7}, 0x20000801) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) socketpair(0x15, 0x2, 0x7fff, &(0x7f0000000080)) read$fb(r1, &(0x7f0000000300)=""/123, 0x7b) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r1, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x468}}, './file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) bind$rds(r4, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) (async) bind$rds(r4, &(0x7f00000003c0)={0x2, 0x4e22, @rand_addr=0x64010102}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000005c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f00000005c0), 0x0, 0x10, &(0x7f0000000380), &(0x7f0000000580), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) ioctl$FBIOBLANK(r3, 0x4611, 0x3) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000200)={0x8, r6, 0x1}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000200)={0x8, r6, 0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x1010, r5, 0x10000000) 08:32:02 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)=ANY=[@ANYBLOB="010100001800000000000000", @ANYRES32=r1, @ANYBLOB="46e60000000000002e2f66696c653000"]) 08:32:02 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0xcb, 0x1f}}, 0x28) 08:32:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '*/&'}}, 0x2c) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x460, 0x3f4, 0x20, 0x70bd25, 0x25dfdbff, {0x3, 0x1, 0x5, [0x8001, 0x9, 0x2, 0x2, 0x80000000, 0x5, 0x1, 0x57c8, 0xea, 0x7ff, 0x20, 0xf08, 0x0, 0x6, 0x9ce0, 0x3ff, 0x4, 0x1, 0x3, 0x0, 0x4, 0x10001, 0x7, 0x1, 0x40, 0xffffffff, 0x2, 0x101, 0x1, 0x0, 0x80, 0x4, 0x401, 0x8, 0x9, 0x4cf, 0xfff, 0x81, 0xfa4a, 0x8, 0x400, 0x10001, 0xffffda41, 0x7fff, 0x7, 0x10001, 0x73b, 0x23b, 0x1, 0x1, 0x7fffffff, 0x1, 0x5, 0x8, 0xffffff01, 0x6, 0x3, 0x73c91050, 0x20, 0x401, 0x2, 0x2, 0x7, 0x9], [0x9, 0x7, 0x7, 0x1, 0xffffffff, 0x3f, 0x4, 0x3, 0x100, 0x1, 0x80000001, 0x10001, 0x200, 0x5, 0x4, 0x9, 0x0, 0xffffff87, 0x1, 0x3ff, 0x6, 0x80, 0x6, 0x10000000, 0x2, 0x7, 0xa8e4, 0x5, 0x100, 0xfffffffe, 0x5be6, 0x400, 0x401, 0xffffb4a8, 0x5f0, 0x3208f261, 0x1, 0x8a, 0x8001, 0x0, 0x4, 0x86, 0x7, 0x8, 0x8, 0x2, 0x2, 0x8, 0x800, 0x361, 0x8, 0x3fe, 0x79de, 0x3ff, 0x3, 0x9a14, 0x5, 0x101, 0x0, 0x3, 0x1, 0x800, 0x8, 0xfffffffa], [0x0, 0x0, 0x34ed88bc, 0xaca, 0x9, 0x200, 0x0, 0x1000, 0x25, 0x10001, 0x6, 0x9, 0x7, 0x1, 0x5, 0x1f, 0x0, 0xc5, 0x465c, 0x101, 0xa33, 0x5, 0xb14, 0x9, 0x3ff, 0x1f, 0xffffffff, 0x1, 0x8, 0x9, 0x6, 0x10000, 0xfff, 0x81, 0xffffffff, 0x7fffffff, 0x1, 0x400, 0xffffffff, 0xf2, 0x4, 0x4, 0xef8, 0x1, 0x0, 0x4, 0x0, 0x3, 0xb0a, 0x6, 0x3, 0x1ff, 0x0, 0x2, 0x6627fdbb, 0x58, 0x7, 0x5, 0xa7, 0x101, 0x4, 0x35222d66, 0x5, 0x1], [0xa13, 0x20, 0x2d7, 0x7fffffff, 0x12, 0x200, 0x1000, 0x9, 0x4, 0x10001, 0x8, 0x40, 0x4, 0x101, 0x3, 0x1, 0x7f, 0x10001, 0x2, 0xfff, 0xffffffe1, 0x81, 0x7f, 0x3, 0x4, 0x800, 0x6, 0x4, 0x3, 0x0, 0x8001, 0x400, 0x2f, 0x2, 0x3, 0x4, 0x100, 0x77d, 0x329, 0x0, 0x1, 0x9, 0xd15, 0x9, 0x10e2, 0x1ff, 0x10706f0f, 0x7fff, 0xcb59182, 0x2, 0x8001, 0x7fff, 0x2, 0x1f8a40, 0x400, 0x7, 0x9, 0x505, 0xffff, 0x47a, 0x2, 0x7, 0x401, 0x80000000], 0x3f, ['/sys/kernel/debug/binder/state\x00', '/sys/kernel/debug/binder/state\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x460}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x4}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x444, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c64656661756c745f7065696f6e732c616c6c6f775f6f746865722c616c6c6f775f6f746865722c61707072616973652c7375626a5f726f6c654fc553977963bd9615758c3f0f3d002c617070726169730000000000"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:02 executing program 1: socketpair(0x26, 0x80000, 0xfffffeff, &(0x7f0000000000)) 08:32:02 executing program 5: socketpair(0x2, 0xa, 0xf3, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x60}}, 0x4008000) 08:32:02 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:32:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x810, r0, 0x10000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, r2, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x23456}, 0x2) 08:32:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '*/&'}}, 0x2c) (async, rerun: 64) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x460, 0x3f4, 0x20, 0x70bd25, 0x25dfdbff, {0x3, 0x1, 0x5, [0x8001, 0x9, 0x2, 0x2, 0x80000000, 0x5, 0x1, 0x57c8, 0xea, 0x7ff, 0x20, 0xf08, 0x0, 0x6, 0x9ce0, 0x3ff, 0x4, 0x1, 0x3, 0x0, 0x4, 0x10001, 0x7, 0x1, 0x40, 0xffffffff, 0x2, 0x101, 0x1, 0x0, 0x80, 0x4, 0x401, 0x8, 0x9, 0x4cf, 0xfff, 0x81, 0xfa4a, 0x8, 0x400, 0x10001, 0xffffda41, 0x7fff, 0x7, 0x10001, 0x73b, 0x23b, 0x1, 0x1, 0x7fffffff, 0x1, 0x5, 0x8, 0xffffff01, 0x6, 0x3, 0x73c91050, 0x20, 0x401, 0x2, 0x2, 0x7, 0x9], [0x9, 0x7, 0x7, 0x1, 0xffffffff, 0x3f, 0x4, 0x3, 0x100, 0x1, 0x80000001, 0x10001, 0x200, 0x5, 0x4, 0x9, 0x0, 0xffffff87, 0x1, 0x3ff, 0x6, 0x80, 0x6, 0x10000000, 0x2, 0x7, 0xa8e4, 0x5, 0x100, 0xfffffffe, 0x5be6, 0x400, 0x401, 0xffffb4a8, 0x5f0, 0x3208f261, 0x1, 0x8a, 0x8001, 0x0, 0x4, 0x86, 0x7, 0x8, 0x8, 0x2, 0x2, 0x8, 0x800, 0x361, 0x8, 0x3fe, 0x79de, 0x3ff, 0x3, 0x9a14, 0x5, 0x101, 0x0, 0x3, 0x1, 0x800, 0x8, 0xfffffffa], [0x0, 0x0, 0x34ed88bc, 0xaca, 0x9, 0x200, 0x0, 0x1000, 0x25, 0x10001, 0x6, 0x9, 0x7, 0x1, 0x5, 0x1f, 0x0, 0xc5, 0x465c, 0x101, 0xa33, 0x5, 0xb14, 0x9, 0x3ff, 0x1f, 0xffffffff, 0x1, 0x8, 0x9, 0x6, 0x10000, 0xfff, 0x81, 0xffffffff, 0x7fffffff, 0x1, 0x400, 0xffffffff, 0xf2, 0x4, 0x4, 0xef8, 0x1, 0x0, 0x4, 0x0, 0x3, 0xb0a, 0x6, 0x3, 0x1ff, 0x0, 0x2, 0x6627fdbb, 0x58, 0x7, 0x5, 0xa7, 0x101, 0x4, 0x35222d66, 0x5, 0x1], [0xa13, 0x20, 0x2d7, 0x7fffffff, 0x12, 0x200, 0x1000, 0x9, 0x4, 0x10001, 0x8, 0x40, 0x4, 0x101, 0x3, 0x1, 0x7f, 0x10001, 0x2, 0xfff, 0xffffffe1, 0x81, 0x7f, 0x3, 0x4, 0x800, 0x6, 0x4, 0x3, 0x0, 0x8001, 0x400, 0x2f, 0x2, 0x3, 0x4, 0x100, 0x77d, 0x329, 0x0, 0x1, 0x9, 0xd15, 0x9, 0x10e2, 0x1ff, 0x10706f0f, 0x7fff, 0xcb59182, 0x2, 0x8001, 0x7fff, 0x2, 0x1f8a40, 0x400, 0x7, 0x9, 0x505, 0xffff, 0x47a, 0x2, 0x7, 0x401, 0x80000000], 0x3f, ['/sys/kernel/debug/binder/state\x00', '/sys/kernel/debug/binder/state\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x460}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x4}}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x444, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c64656661756c745f7065696f6e732c616c6c6f775f6f746865722c616c6c6f775f6f746865722c61707072616973652c7375626a5f726f6c654fc553977963bd9615758c3f0f3d002c617070726169730000000000"]) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (rerun: 64) 08:32:02 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) socketpair(0x21, 0xe, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) [ 1585.551358][T12557] syz-executor.5 uses obsolete (PF_INET,SOCK_PACKET) 08:32:02 executing program 1: socketpair(0x26, 0x80000, 0xfffffeff, &(0x7f0000000000)) 08:32:02 executing program 5: socketpair(0x2, 0xa, 0xf3, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x60}}, 0x4008000) 08:32:02 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:32:02 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x810, r0, 0x10000000) (async, rerun: 32) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, r2, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x23456}, 0x2) 08:32:02 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async) socketpair(0x21, 0xe, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 08:32:02 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x5}) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r0, 0x0, 0x0, 0x1}, 0xc5) 08:32:02 executing program 5: socketpair(0x2, 0xa, 0xf3, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x60}}, 0x4008000) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x60}}, 0x4008000) 08:32:02 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) write$FUSE_NOTIFY_DELETE(r1, &(0x7f0000000000)={0x2c, 0x6, 0x0, {0x1, 0x1, 0x3, 0x0, '*/&'}}, 0x2c) sendmsg$AUDIT_DEL_RULE(r1, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x460, 0x3f4, 0x20, 0x70bd25, 0x25dfdbff, {0x3, 0x1, 0x5, [0x8001, 0x9, 0x2, 0x2, 0x80000000, 0x5, 0x1, 0x57c8, 0xea, 0x7ff, 0x20, 0xf08, 0x0, 0x6, 0x9ce0, 0x3ff, 0x4, 0x1, 0x3, 0x0, 0x4, 0x10001, 0x7, 0x1, 0x40, 0xffffffff, 0x2, 0x101, 0x1, 0x0, 0x80, 0x4, 0x401, 0x8, 0x9, 0x4cf, 0xfff, 0x81, 0xfa4a, 0x8, 0x400, 0x10001, 0xffffda41, 0x7fff, 0x7, 0x10001, 0x73b, 0x23b, 0x1, 0x1, 0x7fffffff, 0x1, 0x5, 0x8, 0xffffff01, 0x6, 0x3, 0x73c91050, 0x20, 0x401, 0x2, 0x2, 0x7, 0x9], [0x9, 0x7, 0x7, 0x1, 0xffffffff, 0x3f, 0x4, 0x3, 0x100, 0x1, 0x80000001, 0x10001, 0x200, 0x5, 0x4, 0x9, 0x0, 0xffffff87, 0x1, 0x3ff, 0x6, 0x80, 0x6, 0x10000000, 0x2, 0x7, 0xa8e4, 0x5, 0x100, 0xfffffffe, 0x5be6, 0x400, 0x401, 0xffffb4a8, 0x5f0, 0x3208f261, 0x1, 0x8a, 0x8001, 0x0, 0x4, 0x86, 0x7, 0x8, 0x8, 0x2, 0x2, 0x8, 0x800, 0x361, 0x8, 0x3fe, 0x79de, 0x3ff, 0x3, 0x9a14, 0x5, 0x101, 0x0, 0x3, 0x1, 0x800, 0x8, 0xfffffffa], [0x0, 0x0, 0x34ed88bc, 0xaca, 0x9, 0x200, 0x0, 0x1000, 0x25, 0x10001, 0x6, 0x9, 0x7, 0x1, 0x5, 0x1f, 0x0, 0xc5, 0x465c, 0x101, 0xa33, 0x5, 0xb14, 0x9, 0x3ff, 0x1f, 0xffffffff, 0x1, 0x8, 0x9, 0x6, 0x10000, 0xfff, 0x81, 0xffffffff, 0x7fffffff, 0x1, 0x400, 0xffffffff, 0xf2, 0x4, 0x4, 0xef8, 0x1, 0x0, 0x4, 0x0, 0x3, 0xb0a, 0x6, 0x3, 0x1ff, 0x0, 0x2, 0x6627fdbb, 0x58, 0x7, 0x5, 0xa7, 0x101, 0x4, 0x35222d66, 0x5, 0x1], [0xa13, 0x20, 0x2d7, 0x7fffffff, 0x12, 0x200, 0x1000, 0x9, 0x4, 0x10001, 0x8, 0x40, 0x4, 0x101, 0x3, 0x1, 0x7f, 0x10001, 0x2, 0xfff, 0xffffffe1, 0x81, 0x7f, 0x3, 0x4, 0x800, 0x6, 0x4, 0x3, 0x0, 0x8001, 0x400, 0x2f, 0x2, 0x3, 0x4, 0x100, 0x77d, 0x329, 0x0, 0x1, 0x9, 0xd15, 0x9, 0x10e2, 0x1ff, 0x10706f0f, 0x7fff, 0xcb59182, 0x2, 0x8001, 0x7fff, 0x2, 0x1f8a40, 0x400, 0x7, 0x9, 0x505, 0xffff, 0x47a, 0x2, 0x7, 0x401, 0x80000000], 0x3f, ['/sys/kernel/debug/binder/state\x00', '/sys/kernel/debug/binder/state\x00', '\x00']}, ["", "", "", "", "", "", "", ""]}, 0x460}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r0, {0x2, 0x4}}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000640)='./file0\x00', &(0x7f0000000680), 0x444, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000140000,user_id=', @ANYRESDEC, @ANYBLOB=',group_id=', @ANYRESDEC=0xee01, @ANYBLOB="2c64656661756c745f7065696f6e732c616c6c6f775f6f746865722c616c6c6f775f6f746865722c61707072616973652c7375626a5f726f6c654fc553977963bd9615758c3f0f3d002c617070726169730000000000"]) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000600)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:02 executing program 0: socketpair(0x26, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000800) 08:32:03 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x5}) (async) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r0, 0x0, 0x0, 0x1}, 0xc5) 08:32:03 executing program 2: ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(0xffffffffffffffff, 0xc01064c2, &(0x7f0000000080)) (async, rerun: 32) socketpair(0x21, 0xe, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 08:32:03 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) syz_open_dev$video(&(0x7f0000000080), 0x800, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 08:32:03 executing program 5: sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x43c, 0x3f3, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x2, 0x38, [0x3, 0x7f, 0xfffff87f, 0x1, 0x0, 0xcc29, 0x2, 0x3, 0xcd, 0x4, 0x8, 0x0, 0x7, 0xffffffff, 0xff, 0x8, 0x3, 0x8, 0x7, 0x401, 0x0, 0x4, 0x5, 0x6846, 0x20, 0x7, 0x3, 0xff, 0x9, 0x8a5c, 0xffffffff, 0x200, 0x8, 0x0, 0x9, 0x0, 0x80, 0x9, 0x7, 0x2, 0x100, 0xffffffff, 0xffffffe1, 0x35c, 0x2, 0x9c5, 0x63, 0x401, 0x7, 0x3, 0x7, 0x2, 0xa5cd, 0x7ff, 0x64, 0x7, 0x8, 0x1, 0x1, 0x5, 0x3, 0xfffff6ac, 0x7fffffff, 0x7], [0x7, 0x7, 0xfffffff9, 0x6, 0x81, 0x4, 0x7f, 0x5, 0x40, 0x10001, 0xfffffff7, 0x8001, 0x0, 0xffff, 0x0, 0x0, 0x8fba, 0x7, 0x2, 0x3, 0x4, 0x8, 0x7fff, 0x80000001, 0x81, 0x9, 0x9, 0x3, 0x6, 0x10000, 0x2, 0x4, 0x3fdef37a, 0x1, 0x7, 0x7, 0xdd54, 0x2000, 0xffff, 0x4, 0xfffffc00, 0x400, 0x7, 0xf8000, 0x200, 0x0, 0x3f, 0x6, 0xc9, 0x0, 0x8, 0x401, 0x6, 0x9, 0x183, 0x8, 0x8, 0x1, 0x4, 0x401, 0x80, 0x6, 0x9], [0x3e, 0x2, 0x401, 0x5, 0x3, 0x5, 0x7fff, 0x40, 0x100, 0x94ba, 0x3, 0x5, 0x3, 0x40000000, 0x3, 0x1, 0x8b6f, 0x8000, 0xe21, 0x9, 0x7, 0xfffff801, 0x4, 0x7ff, 0x2, 0x0, 0x28fd, 0x8, 0x3, 0x1, 0x0, 0x5, 0x200, 0xc8, 0xffffffff, 0x5, 0x6, 0x1ff, 0x8001, 0x9, 0x7, 0x2, 0x0, 0xc39, 0x8000, 0x8001, 0x0, 0x5, 0x1, 0x800, 0x59d04fe3, 0x6, 0x81, 0x53f4594a, 0x7, 0x1, 0x8, 0x4, 0x7fffffff, 0x4, 0xfffffffc, 0x6, 0x6, 0xff], [0x1, 0x1, 0x101, 0x10000, 0x2, 0x8001, 0x80000000, 0x6, 0x7, 0x7, 0x7, 0xffffffff, 0x200, 0x2, 0x5, 0x60, 0x800, 0x9, 0x400, 0x1, 0x5, 0xfffffffe, 0x0, 0x3f, 0x7, 0x0, 0x4, 0xffffffff, 0x5, 0x4, 0x1ff, 0x7ff, 0x2, 0x1, 0x7, 0xb3, 0xffff, 0x9, 0x1, 0x0, 0x9, 0x1, 0x0, 0x8543, 0x7, 0x676c, 0x4, 0x0, 0xa1, 0x1680000, 0x3dc, 0x3, 0x1000, 0xbb, 0x399, 0x8001, 0x0, 0x8, 0x1, 0x0, 0x5, 0x7ee, 0x2, 0x2], 0x1a, ['|\xf8-\x00', '', '^\\\x00', '}&)*\x06/\x00', '\x00', '%:&\x00', '\x00', '\\^\x00', '/$\x00']}, ["", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040050}, 0x4c040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000b40)=ANY=[@ANYBLOB="a1079757b475f444cb2540bb9b616e7fe89024455f9356c292020b19c43e823fde2e0000df2613ceb1e721ddf38497bd4f93fb1f8777e21cba1db1222f23fc8f35a1c97a219ea33839fcc1b2546aa2b31237136aa9486d6e956369a64219c9277329ac0d1656d22c0e765d76a165c514f4029a8bd5789537f1c468f2a88af1f83ce7100668b53e939ab78a1cf8c756148eea27778ecbc6d9d17ae6d30d597fc6b7418805069467e7c8c3944832b53f10e0ddf388693e14476e33b34119c03b4e15cb99c2bdc11ef46c1a5ff9957ad50e0eaffbf8af05521fe3b117fcac1a7a29df070fb8090743e1c0fb90af", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4a9b13f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair(0x37, 0x2f3986c5022bf2fe, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000540)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffc00}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}}, 0x14) 08:32:03 executing program 0: socketpair(0x26, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000800) socketpair(0x26, 0x0, 0x400, &(0x7f0000000000)) (async) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000800) (async) 08:32:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000f, 0x810, r0, 0x10000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_OPENAT={0x12, 0x6, 0x0, r2, 0x0, &(0x7f0000000000)='./file0\x00', 0x2, 0x0, 0x23456}, 0x2) 08:32:03 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000001000000002e2f66696c6530580c273fa7b5eb856110bd68009bd36c0ecf4451fb4ad4bf58deed4fd2027b3b55e9aa23e0aa978aeb4b48208d540ac75a237896e5161bcdb0018f014f0d50b746811cd5c9de26aefb17377005a8d1ba0ba82ac650722401351e9342a31a85c08700"]) getsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000080)=""/217, &(0x7f0000000180)=0xd9) 08:32:03 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000040)={0x5}) (async) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_SHUTDOWN={0x22, 0x22, 0x0, r0, 0x0, 0x0, 0x1}, 0xc5) 08:32:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x5, 0x8000, 0x7ff, 0x9, 0x0, 0xf9, 0xe1, 0x5]) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) getsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:32:03 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) syz_open_dev$video(&(0x7f0000000080), 0x800, 0x1) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 08:32:03 executing program 0: socketpair(0x26, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_LIST_RULES(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f5, 0x400, 0x70bd26, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}}, 0x20000800) 08:32:03 executing program 5: sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x43c, 0x3f3, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x2, 0x38, [0x3, 0x7f, 0xfffff87f, 0x1, 0x0, 0xcc29, 0x2, 0x3, 0xcd, 0x4, 0x8, 0x0, 0x7, 0xffffffff, 0xff, 0x8, 0x3, 0x8, 0x7, 0x401, 0x0, 0x4, 0x5, 0x6846, 0x20, 0x7, 0x3, 0xff, 0x9, 0x8a5c, 0xffffffff, 0x200, 0x8, 0x0, 0x9, 0x0, 0x80, 0x9, 0x7, 0x2, 0x100, 0xffffffff, 0xffffffe1, 0x35c, 0x2, 0x9c5, 0x63, 0x401, 0x7, 0x3, 0x7, 0x2, 0xa5cd, 0x7ff, 0x64, 0x7, 0x8, 0x1, 0x1, 0x5, 0x3, 0xfffff6ac, 0x7fffffff, 0x7], [0x7, 0x7, 0xfffffff9, 0x6, 0x81, 0x4, 0x7f, 0x5, 0x40, 0x10001, 0xfffffff7, 0x8001, 0x0, 0xffff, 0x0, 0x0, 0x8fba, 0x7, 0x2, 0x3, 0x4, 0x8, 0x7fff, 0x80000001, 0x81, 0x9, 0x9, 0x3, 0x6, 0x10000, 0x2, 0x4, 0x3fdef37a, 0x1, 0x7, 0x7, 0xdd54, 0x2000, 0xffff, 0x4, 0xfffffc00, 0x400, 0x7, 0xf8000, 0x200, 0x0, 0x3f, 0x6, 0xc9, 0x0, 0x8, 0x401, 0x6, 0x9, 0x183, 0x8, 0x8, 0x1, 0x4, 0x401, 0x80, 0x6, 0x9], [0x3e, 0x2, 0x401, 0x5, 0x3, 0x5, 0x7fff, 0x40, 0x100, 0x94ba, 0x3, 0x5, 0x3, 0x40000000, 0x3, 0x1, 0x8b6f, 0x8000, 0xe21, 0x9, 0x7, 0xfffff801, 0x4, 0x7ff, 0x2, 0x0, 0x28fd, 0x8, 0x3, 0x1, 0x0, 0x5, 0x200, 0xc8, 0xffffffff, 0x5, 0x6, 0x1ff, 0x8001, 0x9, 0x7, 0x2, 0x0, 0xc39, 0x8000, 0x8001, 0x0, 0x5, 0x1, 0x800, 0x59d04fe3, 0x6, 0x81, 0x53f4594a, 0x7, 0x1, 0x8, 0x4, 0x7fffffff, 0x4, 0xfffffffc, 0x6, 0x6, 0xff], [0x1, 0x1, 0x101, 0x10000, 0x2, 0x8001, 0x80000000, 0x6, 0x7, 0x7, 0x7, 0xffffffff, 0x200, 0x2, 0x5, 0x60, 0x800, 0x9, 0x400, 0x1, 0x5, 0xfffffffe, 0x0, 0x3f, 0x7, 0x0, 0x4, 0xffffffff, 0x5, 0x4, 0x1ff, 0x7ff, 0x2, 0x1, 0x7, 0xb3, 0xffff, 0x9, 0x1, 0x0, 0x9, 0x1, 0x0, 0x8543, 0x7, 0x676c, 0x4, 0x0, 0xa1, 0x1680000, 0x3dc, 0x3, 0x1000, 0xbb, 0x399, 0x8001, 0x0, 0x8, 0x1, 0x0, 0x5, 0x7ee, 0x2, 0x2], 0x1a, ['|\xf8-\x00', '', '^\\\x00', '}&)*\x06/\x00', '\x00', '%:&\x00', '\x00', '\\^\x00', '/$\x00']}, ["", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040050}, 0x4c040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000b40)=ANY=[@ANYBLOB="a1079757b475f444cb2540bb9b616e7fe89024455f9356c292020b19c43e823fde2e0000df2613ceb1e721ddf38497bd4f93fb1f8777e21cba1db1222f23fc8f35a1c97a219ea33839fcc1b2546aa2b31237136aa9486d6e956369a64219c9277329ac0d1656d22c0e765d76a165c514f4029a8bd5789537f1c468f2a88af1f83ce7100668b53e939ab78a1cf8c756148eea27778ecbc6d9d17ae6d30d597fc6b7418805069467e7c8c3944832b53f10e0ddf388693e14476e33b34119c03b4e15cb99c2bdc11ef46c1a5ff9957ad50e0eaffbf8af05521fe3b117fcac1a7a29df070fb8090743e1c0fb90af", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4a9b13f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) socketpair(0x37, 0x2f3986c5022bf2fe, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000540)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffc00}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}}, 0x14) 08:32:03 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000280)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000001000000002e2f66696c6530580c273fa7b5eb856110bd68009bd36c0ecf4451fb4ad4bf58deed4fd2027b3b55e9aa23e0aa978aeb4b48208d540ac75a237896e5161bcdb0018f014f0d50b746811cd5c9de26aefb17377005a8d1ba0ba82ac650722401351e9342a31a85c08700"]) (async, rerun: 32) getsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000080)=""/217, &(0x7f0000000180)=0xd9) (rerun: 32) 08:32:03 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250500000008003b000104000005003300bcf5abb9ab6883710400000008002c000600000008003c0009620000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 08:32:03 executing program 4: ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) syz_open_dev$video(&(0x7f0000000080), 0x800, 0x1) (async) ioctl$DRM_IOCTL_SYNCOBJ_CREATE(0xffffffffffffffff, 0xc00864bf, &(0x7f0000000000)={0x0, 0x1}) 08:32:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x5, 0x8000, 0x7ff, 0x9, 0x0, 0xf9, 0xe1, 0x5]) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) getsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x5, 0x8000, 0x7ff, 0x9, 0x0, 0xf9, 0xe1, 0x5]) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) getsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async) 08:32:03 executing program 5: sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x43c, 0x3f3, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x2, 0x38, [0x3, 0x7f, 0xfffff87f, 0x1, 0x0, 0xcc29, 0x2, 0x3, 0xcd, 0x4, 0x8, 0x0, 0x7, 0xffffffff, 0xff, 0x8, 0x3, 0x8, 0x7, 0x401, 0x0, 0x4, 0x5, 0x6846, 0x20, 0x7, 0x3, 0xff, 0x9, 0x8a5c, 0xffffffff, 0x200, 0x8, 0x0, 0x9, 0x0, 0x80, 0x9, 0x7, 0x2, 0x100, 0xffffffff, 0xffffffe1, 0x35c, 0x2, 0x9c5, 0x63, 0x401, 0x7, 0x3, 0x7, 0x2, 0xa5cd, 0x7ff, 0x64, 0x7, 0x8, 0x1, 0x1, 0x5, 0x3, 0xfffff6ac, 0x7fffffff, 0x7], [0x7, 0x7, 0xfffffff9, 0x6, 0x81, 0x4, 0x7f, 0x5, 0x40, 0x10001, 0xfffffff7, 0x8001, 0x0, 0xffff, 0x0, 0x0, 0x8fba, 0x7, 0x2, 0x3, 0x4, 0x8, 0x7fff, 0x80000001, 0x81, 0x9, 0x9, 0x3, 0x6, 0x10000, 0x2, 0x4, 0x3fdef37a, 0x1, 0x7, 0x7, 0xdd54, 0x2000, 0xffff, 0x4, 0xfffffc00, 0x400, 0x7, 0xf8000, 0x200, 0x0, 0x3f, 0x6, 0xc9, 0x0, 0x8, 0x401, 0x6, 0x9, 0x183, 0x8, 0x8, 0x1, 0x4, 0x401, 0x80, 0x6, 0x9], [0x3e, 0x2, 0x401, 0x5, 0x3, 0x5, 0x7fff, 0x40, 0x100, 0x94ba, 0x3, 0x5, 0x3, 0x40000000, 0x3, 0x1, 0x8b6f, 0x8000, 0xe21, 0x9, 0x7, 0xfffff801, 0x4, 0x7ff, 0x2, 0x0, 0x28fd, 0x8, 0x3, 0x1, 0x0, 0x5, 0x200, 0xc8, 0xffffffff, 0x5, 0x6, 0x1ff, 0x8001, 0x9, 0x7, 0x2, 0x0, 0xc39, 0x8000, 0x8001, 0x0, 0x5, 0x1, 0x800, 0x59d04fe3, 0x6, 0x81, 0x53f4594a, 0x7, 0x1, 0x8, 0x4, 0x7fffffff, 0x4, 0xfffffffc, 0x6, 0x6, 0xff], [0x1, 0x1, 0x101, 0x10000, 0x2, 0x8001, 0x80000000, 0x6, 0x7, 0x7, 0x7, 0xffffffff, 0x200, 0x2, 0x5, 0x60, 0x800, 0x9, 0x400, 0x1, 0x5, 0xfffffffe, 0x0, 0x3f, 0x7, 0x0, 0x4, 0xffffffff, 0x5, 0x4, 0x1ff, 0x7ff, 0x2, 0x1, 0x7, 0xb3, 0xffff, 0x9, 0x1, 0x0, 0x9, 0x1, 0x0, 0x8543, 0x7, 0x676c, 0x4, 0x0, 0xa1, 0x1680000, 0x3dc, 0x3, 0x1000, 0xbb, 0x399, 0x8001, 0x0, 0x8, 0x1, 0x0, 0x5, 0x7ee, 0x2, 0x2], 0x1a, ['|\xf8-\x00', '', '^\\\x00', '}&)*\x06/\x00', '\x00', '%:&\x00', '\x00', '\\^\x00', '/$\x00']}, ["", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) (async) sendmsg$AUDIT_ADD_RULE(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)={0x43c, 0x3f3, 0x1, 0x70bd26, 0x25dfdbfe, {0x2, 0x2, 0x38, [0x3, 0x7f, 0xfffff87f, 0x1, 0x0, 0xcc29, 0x2, 0x3, 0xcd, 0x4, 0x8, 0x0, 0x7, 0xffffffff, 0xff, 0x8, 0x3, 0x8, 0x7, 0x401, 0x0, 0x4, 0x5, 0x6846, 0x20, 0x7, 0x3, 0xff, 0x9, 0x8a5c, 0xffffffff, 0x200, 0x8, 0x0, 0x9, 0x0, 0x80, 0x9, 0x7, 0x2, 0x100, 0xffffffff, 0xffffffe1, 0x35c, 0x2, 0x9c5, 0x63, 0x401, 0x7, 0x3, 0x7, 0x2, 0xa5cd, 0x7ff, 0x64, 0x7, 0x8, 0x1, 0x1, 0x5, 0x3, 0xfffff6ac, 0x7fffffff, 0x7], [0x7, 0x7, 0xfffffff9, 0x6, 0x81, 0x4, 0x7f, 0x5, 0x40, 0x10001, 0xfffffff7, 0x8001, 0x0, 0xffff, 0x0, 0x0, 0x8fba, 0x7, 0x2, 0x3, 0x4, 0x8, 0x7fff, 0x80000001, 0x81, 0x9, 0x9, 0x3, 0x6, 0x10000, 0x2, 0x4, 0x3fdef37a, 0x1, 0x7, 0x7, 0xdd54, 0x2000, 0xffff, 0x4, 0xfffffc00, 0x400, 0x7, 0xf8000, 0x200, 0x0, 0x3f, 0x6, 0xc9, 0x0, 0x8, 0x401, 0x6, 0x9, 0x183, 0x8, 0x8, 0x1, 0x4, 0x401, 0x80, 0x6, 0x9], [0x3e, 0x2, 0x401, 0x5, 0x3, 0x5, 0x7fff, 0x40, 0x100, 0x94ba, 0x3, 0x5, 0x3, 0x40000000, 0x3, 0x1, 0x8b6f, 0x8000, 0xe21, 0x9, 0x7, 0xfffff801, 0x4, 0x7ff, 0x2, 0x0, 0x28fd, 0x8, 0x3, 0x1, 0x0, 0x5, 0x200, 0xc8, 0xffffffff, 0x5, 0x6, 0x1ff, 0x8001, 0x9, 0x7, 0x2, 0x0, 0xc39, 0x8000, 0x8001, 0x0, 0x5, 0x1, 0x800, 0x59d04fe3, 0x6, 0x81, 0x53f4594a, 0x7, 0x1, 0x8, 0x4, 0x7fffffff, 0x4, 0xfffffffc, 0x6, 0x6, 0xff], [0x1, 0x1, 0x101, 0x10000, 0x2, 0x8001, 0x80000000, 0x6, 0x7, 0x7, 0x7, 0xffffffff, 0x200, 0x2, 0x5, 0x60, 0x800, 0x9, 0x400, 0x1, 0x5, 0xfffffffe, 0x0, 0x3f, 0x7, 0x0, 0x4, 0xffffffff, 0x5, 0x4, 0x1ff, 0x7ff, 0x2, 0x1, 0x7, 0xb3, 0xffff, 0x9, 0x1, 0x0, 0x9, 0x1, 0x0, 0x8543, 0x7, 0x676c, 0x4, 0x0, 0xa1, 0x1680000, 0x3dc, 0x3, 0x1000, 0xbb, 0x399, 0x8001, 0x0, 0x8, 0x1, 0x0, 0x5, 0x7ee, 0x2, 0x2], 0x1a, ['|\xf8-\x00', '', '^\\\x00', '}&)*\x06/\x00', '\x00', '%:&\x00', '\x00', '\\^\x00', '/$\x00']}, ["", "", "", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40004) sendmsg$AUDIT_LIST_RULES(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x10, 0x3f5, 0x100, 0x70bd2d, 0x25dfdbfb, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040050}, 0x4c040) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000b40)=ANY=[@ANYBLOB="a1079757b475f444cb2540bb9b616e7fe89024455f9356c292020b19c43e823fde2e0000df2613ceb1e721ddf38497bd4f93fb1f8777e21cba1db1222f23fc8f35a1c97a219ea33839fcc1b2546aa2b31237136aa9486d6e956369a64219c9277329ac0d1656d22c0e765d76a165c514f4029a8bd5789537f1c468f2a88af1f83ce7100668b53e939ab78a1cf8c756148eea27778ecbc6d9d17ae6d30d597fc6b7418805069467e7c8c3944832b53f10e0ddf388693e14476e33b34119c03b4e15cb99c2bdc11ef46c1a5ff9957ad50e0eaffbf8af05521fe3b117fcac1a7a29df070fb8090743e1c0fb90af", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000b40)=ANY=[@ANYBLOB="a1079757b475f444cb2540bb9b616e7fe89024455f9356c292020b19c43e823fde2e0000df2613ceb1e721ddf38497bd4f93fb1f8777e21cba1db1222f23fc8f35a1c97a219ea33839fcc1b2546aa2b31237136aa9486d6e956369a64219c9277329ac0d1656d22c0e765d76a165c514f4029a8bd5789537f1c468f2a88af1f83ce7100668b53e939ab78a1cf8c756148eea27778ecbc6d9d17ae6d30d597fc6b7418805069467e7c8c3944832b53f10e0ddf388693e14476e33b34119c03b4e15cb99c2bdc11ef46c1a5ff9957ad50e0eaffbf8af05521fe3b117fcac1a7a29df070fb8090743e1c0fb90af", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00./file0\x00']) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4a9b13f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) (async) sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x40, r1, 0x200, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x7fffffff}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x4a9b13f}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) socketpair(0x37, 0x2f3986c5022bf2fe, 0x7, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000540)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={r3, 0xe0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000005c0)=[0x0, 0x0], &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000640)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000680), &(0x7f00000006c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f00000009c0)={{0x1, 0x1, 0x18, r2, {r2}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffc00}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}}, 0x14) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000d40)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000d00)={&(0x7f0000000c80)={0x5c, r1, 0x10, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x9}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0xfffffc00}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0xffff}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x5c}}, 0x14) 08:32:03 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:03 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfff}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r0, &(0x7f0000000280)) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000001c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="00000001000000002e2f66696c6530580c273fa7b5eb856110bd68009bd36c0ecf4451fb4ad4bf58deed4fd2027b3b55e9aa23e0aa978aeb4b48208d540ac75a237896e5161bcdb0018f014f0d50b746811cd5c9de26aefb17377005a8d1ba0ba82ac650722401351e9342a31a85c08700"]) (async) getsockopt$inet6_dccp_buf(r3, 0x21, 0xe, &(0x7f0000000080)=""/217, &(0x7f0000000180)=0xd9) 08:32:03 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250500000008003b000104000005003300bcf5abb9ab6883710400000008002c000600000008003c0009620000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 08:32:03 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f0000000080)=[0x5, 0x8000, 0x7ff, 0x9, 0x0, 0xf9, 0xe1, 0x5]) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) getsockopt$inet6_dccp_int(r0, 0x21, 0x11, &(0x7f0000000000), &(0x7f0000000040)=0x4) 08:32:03 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3}, 0xa) 08:32:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x0, {0x7ff}}, 0x18) socketpair(0x8, 0x3, 0xff, &(0x7f0000000040)) 08:32:03 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x50, 0x0, r1, [{0x0, 0xfffffffffffffffd, 0x1, 0x498d, '$'}, {0x5, 0x80, 0x3, 0x7, '\x00\x00\x00'}]}, 0x50) 08:32:03 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020025bd7000fddbdf250500000008003b000104000005003300bcf5abb9ab6883710400000008002c000600000008003c0009620000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) 08:32:03 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3}, 0xa) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3}, 0xa) (async) 08:32:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r2, &(0x7f0000000040)=0x80, &(0x7f0000000100)=@ieee802154, 0x0, 0x800, 0x1, {0x0, r3}}, 0x80) 08:32:03 executing program 0: ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x0, {0x7ff}}, 0x18) (async) socketpair(0x8, 0x3, 0xff, &(0x7f0000000040)) 08:32:03 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3}, 0xa) (async) connect$bt_rfcomm(0xffffffffffffffff, &(0x7f0000000000)={0x1f, @any, 0x3}, 0xa) 08:32:03 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x50, 0x0, r1, [{0x0, 0xfffffffffffffffd, 0x1, 0x498d, '$'}, {0x5, 0x80, 0x3, 0x7, '\x00\x00\x00'}]}, 0x50) 08:32:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r2, &(0x7f0000000040)=0x80, &(0x7f0000000100)=@ieee802154, 0x0, 0x800, 0x1, {0x0, r3}}, 0x80) 08:32:03 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000040)="75bb9396b696470664aa2b5112800d26b4f244509cd507647d9028667bc89509bc05819f1026c27b75f07b205267e1b1cc9b5dd8c845c055ed8092c787b19b54f10f85b36d1241e4d50e1d1840d27747bf27ff04fe8931d8b04b", 0x5a) 08:32:03 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x22, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, 0x1600, 0x1, {0x0, r1}}, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x400}}, './file1\x00'}) 08:32:03 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) write$FUSE_POLL(r0, &(0x7f0000000080)={0x18, 0xffffffffffffffda, 0x0, {0x7ff}}, 0x18) socketpair(0x8, 0x3, 0xff, &(0x7f0000000040)) (async) socketpair(0x8, 0x3, 0xff, &(0x7f0000000040)) 08:32:03 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000040)="75bb9396b696470664aa2b5112800d26b4f244509cd507647d9028667bc89509bc05819f1026c27b75f07b205267e1b1cc9b5dd8c845c055ed8092c787b19b54f10f85b36d1241e4d50e1d1840d27747bf27ff04fe8931d8b04b", 0x5a) 08:32:03 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2b, 0x6, 0x0, {0x2, 0x6, 0x2, 0x0, '..'}}, 0xb) 08:32:03 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async, rerun: 32) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x22, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, 0x1600, 0x1, {0x0, r1}}, 0x1) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x400}}, './file1\x00'}) 08:32:03 executing program 5: socketpair(0x28, 0xa, 0x100, &(0x7f0000000000)) 08:32:03 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000080)=@IORING_OP_ACCEPT={0xd, 0x1, 0x0, r2, &(0x7f0000000040)=0x80, &(0x7f0000000100)=@ieee802154, 0x0, 0x800, 0x1, {0x0, r3}}, 0x80) 08:32:03 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f00000020c0)={0x50, 0x0, r1, [{0x0, 0xfffffffffffffffd, 0x1, 0x498d, '$'}, {0x5, 0x80, 0x3, 0x7, '\x00\x00\x00'}]}, 0x50) 08:32:03 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_dccp_buf(r0, 0x21, 0xf, &(0x7f0000000040)="75bb9396b696470664aa2b5112800d26b4f244509cd507647d9028667bc89509bc05819f1026c27b75f07b205267e1b1cc9b5dd8c845c055ed8092c787b19b54f10f85b36d1241e4d50e1d1840d27747bf27ff04fe8931d8b04b", 0x5a) 08:32:03 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2b, 0x6, 0x0, {0x2, 0x6, 0x2, 0x0, '..'}}, 0xb) 08:32:03 executing program 5: socketpair(0x28, 0xa, 0x100, &(0x7f0000000000)) 08:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r0, 0x10000000) 08:32:04 executing program 2: socketpair(0x22, 0xe, 0xfffffffb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x3, r0, 0x3}) 08:32:04 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c040000f403040028bd7000fddbdf250000000001000000370000003303000004000000400000005fff0000010000000000000007000000b83b00000600000005000000b1000000008000000004000003000000020000005906000000000000ffff00000500000001000000000000000100000005000000030000000200000806000000e6070000030000004d5da405010000000600000000f4ff00001000000001000001800000010000000400000003007600118b0000060000004d00000002000000000000000100000009000000200000005eab0000930f0000000000006f000000050000000500000000100000ff00000000000000080000000b0500000000000006000000050000000800000007000000e2b99940ff0300000800000008000000070000000000000006000000070000000700000001800000750000008000000000000000ff0100000700000000000000ffff0000ff03000001000000ff0f00000000000000020000300b000009000000f2000000ffff0000cd0000007f00000005000000010000000700000081000000070000000800000005000000ff0000000300000002000000080000000101000006000000003d06000000008000040000010000000300000000000000080000000500000040000000080000000900000007000000f5000000feffffff05efd3000101000001000100bb220000090000000100000020000000050000000700000000040000aa00000006000000010000003900000007000000cb9a000002000000000001000300000008000000a82600000800000901000000ffffff7ff9ffffff08000000030000000900000003000000fc000000b70d00003f0000000000000000000000560000000400000007000000060000008100000003000000a0b4ba5000000000030000000300000059bb000001000000ffffff7f02000000000000000900000003000000060000003f000000030000000100000005000000000000000010000000000080f7ffffffffffffff00080000040000000400000003000000010000000100008008000000ff0000000080000000ffffff4051000007000000ff7f00000300000001010000040000000400000008000000f8000000a2dd744c05000000f7ffffff01040000e103000040000000ff0000000700000020000000ff00000000010000eb08000001080000000000000000008004000000070000000100000008000000050000000700000005000000000400000900000001000080aa02000000000000050000008000000004000000c4d20000040000000600000001000100050000000600000000080000fffffeffff7f000008000000ff030000c26b000001000000e1ffffff0100000000080000ffffff7f040000000400000005000000040000000300000004000000030000000700000001040000000030d0e6633cb6010400001a0000005c2f7d00242800275e0000235d3a2129232a5b002d2e003a2b000000"], 0x43c}, 0x1, 0x0, 0x0, 0x10}, 0x20) 08:32:04 executing program 5: socketpair(0x28, 0xa, 0x100, &(0x7f0000000000)) 08:32:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) r1 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x22, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, 0x1600, 0x1, {0x0, r1}}, 0x1) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x400}}, './file1\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_LINKAT={0x27, 0x22, 0x0, r0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='./file1\x00', 0xffffffffffffffff, 0x1600, 0x1, {0x0, r1}}, 0x1) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r3, {0x400}}, './file1\x00'}) (async) 08:32:04 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2b, 0x6, 0x0, {0x2, 0x6, 0x2, 0x0, '..'}}, 0xb) 08:32:04 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r0, 0x10000000) 08:32:04 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async, rerun: 64) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x10}, 0x20) (rerun: 64) 08:32:04 executing program 5: socketpair(0x10, 0x3, 0xd7, &(0x7f0000000000)) 08:32:04 executing program 2: socketpair(0x22, 0xe, 0xfffffffb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x3, r0, 0x3}) 08:32:04 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x8001) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 08:32:04 executing program 0: socketpair(0xa, 0x3, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x200) 08:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1000000, 0x1010, r0, 0x10000000) 08:32:04 executing program 2: socketpair(0x22, 0xe, 0xfffffffb, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x3, r0, 0x3}) 08:32:04 executing program 5: socketpair(0x10, 0x3, 0xd7, &(0x7f0000000000)) 08:32:04 executing program 0: socketpair(0xa, 0x3, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async, rerun: 32) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) (rerun: 32) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x200) 08:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800008, 0x50, r0, 0x44000) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r1, {0x0, 0x12}}, 0x20) 08:32:04 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) open$dir(&(0x7f0000000200)='./file1\x00', 0x244500, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8051}}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x453, 0x800, 0x70bd2c, 0x25dfdbff, "64143f647752a1b01a47df031eaca7c81de8f3fa97173545b52fc39c3e8c634d2b4b4381c9d24c9a8bc1ec38548ed084e81aa71feb5d3e1e86fef74c163a9432fb5d011876620945bfb871e69a9cbb55fff9d877d4bc8237fd8e483cf73b7d7cb8a20dbac20c83678f96ce6dde944314ea58d6", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000814) 08:32:04 executing program 5: socketpair(0x10, 0x3, 0xd7, &(0x7f0000000000)) 08:32:04 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x10}, 0x20) (async) sendmsg$AUDIT_DEL_RULE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x43c}, 0x1, 0x0, 0x0, 0x10}, 0x20) 08:32:04 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x8001) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 08:32:04 executing program 0: socketpair(0xa, 0x3, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x200) socketpair(0xa, 0x3, 0x400, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0) (async) mmap$usbfs(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1000002, 0x80010, 0xffffffffffffffff, 0x200) (async) 08:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800008, 0x50, r0, 0x44000) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r1, {0x0, 0x12}}, 0x20) 08:32:04 executing program 4: syz_open_dev$dri(&(0x7f0000000000), 0xfff, 0x8001) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) 08:32:04 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) open$dir(&(0x7f0000000200)='./file1\x00', 0x244500, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8051}}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x453, 0x800, 0x70bd2c, 0x25dfdbff, "64143f647752a1b01a47df031eaca7c81de8f3fa97173545b52fc39c3e8c634d2b4b4381c9d24c9a8bc1ec38548ed084e81aa71feb5d3e1e86fef74c163a9432fb5d011876620945bfb871e69a9cbb55fff9d877d4bc8237fd8e483cf73b7d7cb8a20dbac20c83678f96ce6dde944314ea58d6", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000814) 08:32:04 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) write$FUSE_ENTRY(r2, &(0x7f0000001ac0)={0x90, 0xffffffffffffffda, 0x0, {0x1, 0x0, 0x100000001, 0x21, 0x4, 0xffffef48, {0x1, 0x1000, 0x80, 0x8000000000000001, 0x4, 0xffffffff, 0x9, 0x0, 0x3, 0x1000, 0x7ff, r3, r5, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r4, {0x9e6d}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x27}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40050) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x30000000, 0x4, {{0x2f, 0x4, 0x3, 0xa, 0xbc, 0x67, 0x0, 0x1f, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "bf32b3eaf1fc"}, @end, @rr={0x7, 0x13, 0x8a, [@private=0xa010100, @local, @local, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x5c, 0x1, 0x7, [{@rand_addr=0x64010100, 0xa3f2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local}]}, @cipso={0x86, 0x6f, 0x2, [{0x1, 0x10, "72b28778cdebfd1ed337ac966dcd"}, {0x5, 0x9, "171c1e84b8076b"}, {0x1, 0xa, "b1805d8ccea2382d"}, {0x7, 0xa, "9403191c5aaf60cc"}, {0x1, 0x6, "8f27a188"}, {0x6, 0x7, "5b209cb324"}, {0x1, 0xf, "bef4fdc26bc048f87676b32d43"}, {0x5, 0x5, "63a804"}, {0x5, 0x12, "bbb7124661bd098ce4c927de25058ba3"}, {0x2, 0x9, "6718ae483ea501"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r11, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r8, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x3f, 0x6, 0xf, 0x2, 0x100}, @generic={0x6, 0xd, 0xc, 0x1, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x80, 0x3, 0x5, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x12, '\x00', r9, 0x1b, r7, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x0, 0xb3, 0x2}, 0x10, r10, 0x0, 0x0, &(0x7f0000000680)=[r11, r7, r1]}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4ba}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 08:32:04 executing program 1: socketpair(0x1d, 0x3, 0xfffffeff, &(0x7f0000000000)) 08:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) mmap$fb(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x800008, 0x50, r0, 0x44000) (async) read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_OPEN(r0, &(0x7f0000000000)={0x20, 0x0, r1, {0x0, 0x12}}, 0x20) 08:32:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_io_uring_setup(0x154b, &(0x7f0000000040)={0x0, 0xa7e3, 0x8, 0x2, 0x36e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800005, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x9, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0x1ff) r3 = syz_io_uring_setup(0x33be, &(0x7f00000001c0)={0x0, 0x15b7, 0x0, 0x3, 0x3db}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOBLANK(r0, 0x4611, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 08:32:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x3, 0x1}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:04 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) open$dir(&(0x7f0000000200)='./file1\x00', 0x244500, 0x8) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8051}}, './file0\x00'}) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x453, 0x800, 0x70bd2c, 0x25dfdbff, "64143f647752a1b01a47df031eaca7c81de8f3fa97173545b52fc39c3e8c634d2b4b4381c9d24c9a8bc1ec38548ed084e81aa71feb5d3e1e86fef74c163a9432fb5d011876620945bfb871e69a9cbb55fff9d877d4bc8237fd8e483cf73b7d7cb8a20dbac20c83678f96ce6dde944314ea58d6", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000814) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) open$dir(&(0x7f0000000200)='./file1\x00', 0x244500, 0x8) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8051}}, './file0\x00'}) (async) sendmsg$AUDIT_USER_AVC(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x453, 0x800, 0x70bd2c, 0x25dfdbff, "64143f647752a1b01a47df031eaca7c81de8f3fa97173545b52fc39c3e8c634d2b4b4381c9d24c9a8bc1ec38548ed084e81aa71feb5d3e1e86fef74c163a9432fb5d011876620945bfb871e69a9cbb55fff9d877d4bc8237fd8e483cf73b7d7cb8a20dbac20c83678f96ce6dde944314ea58d6", ["", ""]}, 0x84}, 0x1, 0x0, 0x0, 0x24000004}, 0x4000814) (async) 08:32:04 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = getuid() (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) write$FUSE_ENTRY(r2, &(0x7f0000001ac0)={0x90, 0xffffffffffffffda, 0x0, {0x1, 0x0, 0x100000001, 0x21, 0x4, 0xffffef48, {0x1, 0x1000, 0x80, 0x8000000000000001, 0x4, 0xffffffff, 0x9, 0x0, 0x3, 0x1000, 0x7ff, r3, r5, 0x5, 0x5}}}, 0x90) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r4, {0x9e6d}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x27}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40050) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x30000000, 0x4, {{0x2f, 0x4, 0x3, 0xa, 0xbc, 0x67, 0x0, 0x1f, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "bf32b3eaf1fc"}, @end, @rr={0x7, 0x13, 0x8a, [@private=0xa010100, @local, @local, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x5c, 0x1, 0x7, [{@rand_addr=0x64010100, 0xa3f2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local}]}, @cipso={0x86, 0x6f, 0x2, [{0x1, 0x10, "72b28778cdebfd1ed337ac966dcd"}, {0x5, 0x9, "171c1e84b8076b"}, {0x1, 0xa, "b1805d8ccea2382d"}, {0x7, 0xa, "9403191c5aaf60cc"}, {0x1, 0x6, "8f27a188"}, {0x6, 0x7, "5b209cb324"}, {0x1, 0xf, "bef4fdc26bc048f87676b32d43"}, {0x5, 0x5, "63a804"}, {0x5, 0x12, "bbb7124661bd098ce4c927de25058ba3"}, {0x2, 0x9, "6718ae483ea501"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r11, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r8, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x3f, 0x6, 0xf, 0x2, 0x100}, @generic={0x6, 0xd, 0xc, 0x1, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x80, 0x3, 0x5, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x12, '\x00', r9, 0x1b, r7, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x0, 0xb3, 0x2}, 0x10, r10, 0x0, 0x0, &(0x7f0000000680)=[r11, r7, r1]}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4ba}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 08:32:04 executing program 1: socketpair(0x1d, 0x3, 0xfffffeff, &(0x7f0000000000)) socketpair(0x1d, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) 08:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfe12}}, './file0\x00'}) 08:32:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x3, 0x1}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:04 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x40e, {0x0, 0xf0, 0x4}, 0x1}, 0x18) 08:32:04 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = getuid() ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000001a80)={{0x1, 0x1, 0x18, r0, {0xee00, 0xee01}}, './file0\x00'}) write$FUSE_ENTRY(r2, &(0x7f0000001ac0)={0x90, 0xffffffffffffffda, 0x0, {0x1, 0x0, 0x100000001, 0x21, 0x4, 0xffffef48, {0x1, 0x1000, 0x80, 0x8000000000000001, 0x4, 0xffffffff, 0x9, 0x0, 0x3, 0x1000, 0x7ff, r3, r5, 0x5, 0x5}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r4, {0x9e6d}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000001b80)={{0x1, 0x1, 0x18, r4, {0x9e6d}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r6, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x38, 0x0, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x27}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x100}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x840}, 0x40050) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r7, {0x2}}, './file0\x00'}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f00000001c0)={'ip_vti0\x00', 0x0, 0x10, 0x7800, 0x30000000, 0x4, {{0x2f, 0x4, 0x3, 0xa, 0xbc, 0x67, 0x0, 0x1f, 0x2f, 0x0, @local, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x86, 0x8, "bf32b3eaf1fc"}, @end, @rr={0x7, 0x13, 0x8a, [@private=0xa010100, @local, @local, @multicast2]}, @timestamp_addr={0x44, 0x1c, 0x5c, 0x1, 0x7, [{@rand_addr=0x64010100, 0xa3f2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@local}]}, @cipso={0x86, 0x6f, 0x2, [{0x1, 0x10, "72b28778cdebfd1ed337ac966dcd"}, {0x5, 0x9, "171c1e84b8076b"}, {0x1, 0xa, "b1805d8ccea2382d"}, {0x7, 0xa, "9403191c5aaf60cc"}, {0x1, 0x6, "8f27a188"}, {0x6, 0x7, "5b209cb324"}, {0x1, 0xf, "bef4fdc26bc048f87676b32d43"}, {0x5, 0x5, "63a804"}, {0x5, 0x12, "bbb7124661bd098ce4c927de25058ba3"}, {0x2, 0x9, "6718ae483ea501"}]}]}}}}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r1, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000380)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, &(0x7f00000003c0)=[0x0, 0x0, 0x0], &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000440)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000480), &(0x7f00000004c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r11, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001a40)={r8, 0xe0, &(0x7f0000001940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000740)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, &(0x7f00000017c0)=[0x0, 0x0], &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001840)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000001880), &(0x7f00000018c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001900)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_lsm={0x1d, 0xd, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, [@generic={0x3f, 0x6, 0xf, 0x2, 0x100}, @generic={0x6, 0xd, 0xc, 0x1, 0x2}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x7}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x80000000}, @generic={0x80, 0x3, 0x5, 0x8}, @map_fd={0x18, 0x9, 0x1, 0x0, r8}, @call={0x85, 0x0, 0x0, 0x72}]}, &(0x7f0000000180)='syzkaller\x00', 0x2, 0x1000, &(0x7f00000007c0)=""/4096, 0x41000, 0x12, '\x00', r9, 0x1b, r7, 0x8, &(0x7f0000000300)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000340)={0x4, 0x0, 0xb3, 0x2}, 0x10, r10, 0x0, 0x0, &(0x7f0000000680)=[r11, r7, r1]}, 0x80) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4ba}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r2, &(0x7f0000001dc0)={&(0x7f0000001cc0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d80)={&(0x7f0000001d00)={0x54, 0x0, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4ba}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x50) 08:32:04 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_io_uring_setup(0x154b, &(0x7f0000000040)={0x0, 0xa7e3, 0x8, 0x2, 0x36e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800005, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x9, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0x1ff) r3 = syz_io_uring_setup(0x33be, &(0x7f00000001c0)={0x0, 0x15b7, 0x0, 0x3, 0x3db}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOBLANK(r0, 0x4611, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) syz_io_uring_setup(0x154b, &(0x7f0000000040)={0x0, 0xa7e3, 0x8, 0x2, 0x36e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000140)) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800005, 0x1010, r0, 0x10000000) (async) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x9, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0x1ff) (async) syz_io_uring_setup(0x33be, &(0x7f00000001c0)={0x0, 0x15b7, 0x0, 0x3, 0x3db}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) (async) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) (async) ioctl$FBIOBLANK(r0, 0x4611, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) 08:32:04 executing program 1: socketpair(0x1d, 0x3, 0xfffffeff, &(0x7f0000000000)) 08:32:04 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfe12}}, './file0\x00'}) 08:32:04 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x3, 0x1}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$FBIOPUT_CON2FBMAP(r0, 0x4610, &(0x7f0000000040)={0x3, 0x1}) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) 08:32:04 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x40e, {0x0, 0xf0, 0x4}, 0x1}, 0x18) 08:32:04 executing program 5: socketpair(0x36, 0x5, 0x80000003, &(0x7f0000000040)) 08:32:05 executing program 1: socketpair(0x10, 0x80001, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:05 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_io_uring_setup(0x154b, &(0x7f0000000040)={0x0, 0xa7e3, 0x8, 0x2, 0x36e}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) (async) r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2800005, 0x1010, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000180)=@IORING_OP_POLL_ADD={0x6, 0x9, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x1}, 0x1}, 0x1ff) (async) r3 = syz_io_uring_setup(0x33be, &(0x7f00000001c0)={0x0, 0x15b7, 0x0, 0x3, 0x3db}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000240), &(0x7f0000000280)) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r0, 0x0, 0x0}, 0x10) (async) ioctl$FBIOBLANK(r0, 0x4611, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 08:32:05 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x40e, {0x0, 0xf0, 0x4}, 0x1}, 0x18) 08:32:05 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x20010, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x9}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfe12}}, './file0\x00'}) 08:32:05 executing program 0: socketpair(0xa, 0x6, 0x400, &(0x7f0000000040)) 08:32:05 executing program 1: socketpair(0x10, 0x80001, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:05 executing program 5: socketpair(0x36, 0x5, 0x80000003, &(0x7f0000000040)) 08:32:05 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) 08:32:05 executing program 2: socketpair(0x1, 0xe, 0x0, &(0x7f0000000000)) 08:32:05 executing program 5: socketpair(0x36, 0x5, 0x80000003, &(0x7f0000000040)) socketpair(0x36, 0x5, 0x80000003, &(0x7f0000000040)) (async) 08:32:05 executing program 0: socketpair(0xa, 0x6, 0x400, &(0x7f0000000040)) 08:32:05 executing program 1: socketpair(0x10, 0x80001, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:05 executing program 2: socketpair(0x1, 0xe, 0x0, &(0x7f0000000000)) socketpair(0x1, 0xe, 0x0, &(0x7f0000000000)) (async) 08:32:05 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) 08:32:05 executing program 0: socketpair(0xa, 0x6, 0x400, &(0x7f0000000040)) 08:32:05 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2a00000006000000000000000000000005000000ee000000050000000000000001000000000000000000091247c58f73d2fd71e2a50ad95ea11969a77648956f89dc16691fd2615b4a16aaed9d1a6bf204764640c684a383512956fff01e1c987524fb510ae7dc5ab02e70bfb7"], 0x2a) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002080)={0x60, 0x0, r1, {{0x8, 0x4, 0x9, 0xfff, 0x80, 0x2, 0xfd}}}, 0x60) 08:32:05 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e22, 0x7ff, @private0, 0x7f}}}, {&(0x7f0000000040)=""/24, 0x18}, &(0x7f0000000080), 0xb61864aebf0fe4c3}, 0xa0) 08:32:05 executing program 2: socketpair(0x1, 0xe, 0x0, &(0x7f0000000000)) 08:32:05 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {r0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000001080)={{0x1, 0x1, 0x18, r2, {0x101}}, './file0\x00'}) 08:32:05 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2a00000006000000000000000000000005000000ee000000050000000000000001000000000000000000091247c58f73d2fd71e2a50ad95ea11969a77648956f89dc16691fd2615b4a16aaed9d1a6bf204764640c684a383512956fff01e1c987524fb510ae7dc5ab02e70bfb7"], 0x2a) (async, rerun: 32) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002080)={0x60, 0x0, r1, {{0x8, 0x4, 0x9, 0xfff, 0x80, 0x2, 0xfd}}}, 0x60) (rerun: 32) 08:32:05 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002080)={0x50, 0xffffffffffffffda, r0, {0x7, 0x26, 0x400, 0x1000000, 0x2000, 0xe28, 0x1, 0x3}}, 0x50) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:05 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 32) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e22, 0x7ff, @private0, 0x7f}}}, {&(0x7f0000000040)=""/24, 0x18}, &(0x7f0000000080), 0xb61864aebf0fe4c3}, 0xa0) (rerun: 32) 08:32:05 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0xc9, 0x0, 0xc}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7, 0x10000}}, './file0\x00'}) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 08:32:05 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:05 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x94c8c973ee342250, 0x5}}, 0x20) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f696c65300000"]) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 08:32:05 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2a00000006000000000000000000000005000000ee000000050000000000000001000000000000000000091247c58f73d2fd71e2a50ad95ea11969a77648956f89dc16691fd2615b4a16aaed9d1a6bf204764640c684a383512956fff01e1c987524fb510ae7dc5ab02e70bfb7"], 0x2a) (async) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="2a00000006000000000000000000000005000000ee000000050000000000000001000000000000000000091247c58f73d2fd71e2a50ad95ea11969a77648956f89dc16691fd2615b4a16aaed9d1a6bf204764640c684a383512956fff01e1c987524fb510ae7dc5ab02e70bfb7"], 0x2a) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002080)={0x60, 0x0, r1, {{0x8, 0x4, 0x9, 0xfff, 0x80, 0x2, 0xfd}}}, 0x60) 08:32:05 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002080)={0x50, 0xffffffffffffffda, r0, {0x7, 0x26, 0x400, 0x1000000, 0x2000, 0xe28, 0x1, 0x3}}, 0x50) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:05 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e22, 0x7ff, @private0, 0x7f}}}, {&(0x7f0000000040)=""/24, 0x18}, &(0x7f0000000080), 0xb61864aebf0fe4c3}, 0xa0) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x3, 0x1, 0x0, 0x2, {0xa, 0x4e22, 0x7ff, @private0, 0x7f}}}, {&(0x7f0000000040)=""/24, 0x18}, &(0x7f0000000080), 0xb61864aebf0fe4c3}, 0xa0) (async) 08:32:05 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0xc9, 0x0, 0xc}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7, 0x10000}}, './file0\x00'}) (async, rerun: 64) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) 08:32:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff8, 0x8000}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x10, 0x8, 0xffff, 0x69, 0xffffff85, &(0x7f0000000100)="70d1c615bce8301869ffa188f27f9d94942dd6e6295700af8f931fe49cb22b44c39a4679d4ed827ac3a9791584eed36e37b3987ede1cf680a52d87a5a0f0138161a49908505db121dc504feb9962cdf21c8f537304bed2276f2fdf9faa73262623783250f0299f5af0"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) mmap$usbfs(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x810, r3, 0x9b) 08:32:05 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x94c8c973ee342250, 0x5}}, 0x20) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f696c65300000"]) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 08:32:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x101}, 0x8) 08:32:05 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:32:05 executing program 0: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000002080)={0x50, 0xffffffffffffffda, r0, {0x7, 0x26, 0x400, 0x1000000, 0x2000, 0xe28, 0x1, 0x3}}, 0x50) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:05 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000000), 0x94c8c973ee342250, 0x5}}, 0x20) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="05000000000000002e2f696c65300000"]) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 08:32:05 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0xc9, 0x0, 0xc}) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7, 0x10000}}, './file0\x00'}) r3 = syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000040)={0xc9, 0x0, 0xc}) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x7, 0x10000}}, './file0\x00'}) (async) syz_open_dev$cec(&(0x7f0000000100), 0x2, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000140)={{0x1, 0x1, 0x18, r3, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) 08:32:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff8, 0x8000}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x10, 0x8, 0xffff, 0x69, 0xffffff85, &(0x7f0000000100)="70d1c615bce8301869ffa188f27f9d94942dd6e6295700af8f931fe49cb22b44c39a4679d4ed827ac3a9791584eed36e37b3987ede1cf680a52d87a5a0f0138161a49908505db121dc504feb9962cdf21c8f537304bed2276f2fdf9faa73262623783250f0299f5af0"}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) mmap$usbfs(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x810, r3, 0x9b) 08:32:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x101}, 0x8) 08:32:05 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:32:05 executing program 0: socketpair(0xa, 0xa, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x1, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004}, 0x24000800) 08:32:05 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff8, 0x8000}}, './file0\x00'}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x10, 0x8, 0xffff, 0x69, 0xffffff85, &(0x7f0000000100)="70d1c615bce8301869ffa188f27f9d94942dd6e6295700af8f931fe49cb22b44c39a4679d4ed827ac3a9791584eed36e37b3987ede1cf680a52d87a5a0f0138161a49908505db121dc504feb9962cdf21c8f537304bed2276f2fdf9faa73262623783250f0299f5af0"}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) mmap$usbfs(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x810, r3, 0x9b) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0xfffffff8, 0x8000}}, './file0\x00'}) (async) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000080)={0x0, 0x10, 0x8, 0xffff, 0x69, 0xffffff85, &(0x7f0000000100)="70d1c615bce8301869ffa188f27f9d94942dd6e6295700af8f931fe49cb22b44c39a4679d4ed827ac3a9791584eed36e37b3987ede1cf680a52d87a5a0f0138161a49908505db121dc504feb9962cdf21c8f537304bed2276f2fdf9faa73262623783250f0299f5af0"}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0xee00, 0xee00}}, './file0\x00'}) (async) mmap$usbfs(&(0x7f0000fec000/0x14000)=nil, 0x14000, 0x1, 0x810, r3, 0x9b) (async) 08:32:05 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1f, 0x2000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:05 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) 08:32:05 executing program 2: socketpair(0x1a, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10000, r0, 0x1}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x2}, 0xfd}, 0x18) 08:32:05 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x101}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000080)={0x11, 0x10, 0xfa00, {&(0x7f0000000040)}}, 0x18) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000100)={0x101}, 0x8) (async) 08:32:06 executing program 0: socketpair(0xa, 0xa, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x1, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004}, 0x24000800) 08:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1f, 0x2000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:06 executing program 2: socketpair(0x1a, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x1a, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10000, r0, 0x1}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x2}, 0xfd}, 0x18) 08:32:06 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x8000, 0x2, 0x3, 0x8, 0x8, 0x100000000, 0x5, 0x9}, &(0x7f0000000040)={0x7, 0x9, 0x6, 0x3, 0x8, 0x1, 0x2bf, 0x1}, &(0x7f0000000080)={0x8, 0x7, 0x0, 0x80, 0x800, 0x401, 0x45d0ff72, 0x7}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 08:32:06 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) 08:32:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000000)=[r0, r0, r0, r2], 0x4, 0x0, 0x1, {0x0, r3}}, 0x5) 08:32:06 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x1f, 0x2000) ioctl$USBDEVFS_WAIT_FOR_RESUME(r0, 0x5523) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:06 executing program 0: socketpair(0xa, 0xa, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x8}}, './file0\x00'}) sendmsg$AUDIT_GET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3e8, 0x200, 0x1, 0x25dfdbfc, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44004}, 0x24000800) 08:32:06 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x8000, 0x2, 0x3, 0x8, 0x8, 0x100000000, 0x5, 0x9}, &(0x7f0000000040)={0x7, 0x9, 0x6, 0x3, 0x8, 0x1, 0x2bf, 0x1}, &(0x7f0000000080)={0x8, 0x7, 0x0, 0x80, 0x800, 0x401, 0x45d0ff72, 0x7}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 08:32:06 executing program 2: socketpair(0x1a, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r1 = socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000000c0), &(0x7f0000000100)=0x4) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x10000, r0, 0x1}) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x3, {0x2, 0xff, 0x2}, 0xfd}, 0x18) 08:32:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000000)=[r0, r0, r0, r2], 0x4, 0x0, 0x1, {0x0, r3}}, 0x5) 08:32:06 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) 08:32:06 executing program 4: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, 0x464, 0x20, 0x70bd27, 0x25dfdbfc, "b23c1947d9a2ccd236f339d97ed5ff93d8f4fd92edede37a5a7c571ae84dacf435b13af49d06bd911f0014c4fd1c64ed228cca010ac3f76cb2b8073ac79dc4bb218be056b848022ef0ade5085fc5a4b855d11bc1691b2f", ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x4800) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:06 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x8000, 0x2, 0x3, 0x8, 0x8, 0x100000000, 0x5, 0x9}, &(0x7f0000000040)={0x7, 0x9, 0x6, 0x3, 0x8, 0x1, 0x2bf, 0x1}, &(0x7f0000000080)={0x8, 0x7, 0x0, 0x80, 0x800, 0x401, 0x45d0ff72, 0x7}, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f0000000140)={&(0x7f0000000100)={[0x4]}, 0x8}) 08:32:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000000)=[r0, r0, r0, r2], 0x4, 0x0, 0x1, {0x0, r3}}, 0x5) 08:32:06 executing program 2: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25080000000600280003000000087b3a0001040000080009000000000000003c00080000000a000900aaaaaaaaaa1100002f54ecb869182c2ebced95a7e393d62b52493bc37cd3dc547ef53581a9c6dde1527bbaa68386e3180b4712ac1053de65f62f46f31949bffe5df25a31203cb3a6aa7d9f32a4e355c99416dc6bfc1af746c874b8b823d601d8752e03f9d31f811fa1b2759367445bbd9289a1290e3cc6316b36aa77d7a31e0896d8aa33a7c2a5605c97890166db2a17ae5eecba978292d0b0d138762fb0abdd99177659a8c4ccf595126573c4df7e6afab245b0b63db7f78e863ecc31cb779319"], 0x40}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20004004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x6, r0}) 08:32:06 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040000}, 0x15) 08:32:06 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) socket$can_j1939(0x1d, 0x2, 0x7) 08:32:06 executing program 4: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, 0x464, 0x20, 0x70bd27, 0x25dfdbfc, "b23c1947d9a2ccd236f339d97ed5ff93d8f4fd92edede37a5a7c571ae84dacf435b13af49d06bd911f0014c4fd1c64ed228cca010ac3f76cb2b8073ac79dc4bb218be056b848022ef0ade5085fc5a4b855d11bc1691b2f", ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x4800) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x4}) 08:32:06 executing program 1: socketpair(0x10, 0x800, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x448, 0x3f4, 0x8, 0x70bd29, 0x25dfdbff, {0x5, 0x2, 0x25, [0x80000000, 0xfffffffa, 0x60, 0x61, 0x1, 0x1, 0x6d, 0x8, 0x0, 0x5, 0x6, 0x2e3, 0x81, 0x4, 0x4, 0x7, 0xffff0000, 0xfffffffa, 0x200, 0x0, 0x593, 0x8, 0x20, 0x1, 0x1ff, 0x0, 0x2, 0xeaf, 0x4, 0x69, 0x4, 0x4, 0x384, 0x8, 0x3, 0x4, 0x3, 0x0, 0x31fe, 0x7, 0x8, 0x2, 0x80000000, 0x6, 0x1248a3e, 0x8, 0x6, 0x7fff, 0x8, 0x2, 0xa6f6, 0x80000001, 0xffff, 0xe19, 0x6, 0x8, 0x9af9, 0x494dafac, 0x1, 0x6, 0xfff, 0x6, 0x1ff, 0xff], [0x10000, 0x273d, 0x7, 0x4, 0x0, 0x9, 0x6, 0x0, 0x5, 0x8ad6, 0x2, 0x2, 0x0, 0x8, 0x1, 0x9, 0x8001, 0x3, 0x1, 0x8, 0x20, 0x5, 0x2, 0x56baf3ca, 0x2, 0x7, 0x0, 0x7, 0x81, 0x1731, 0x0, 0x9, 0x9, 0x8, 0x5, 0x3, 0x800, 0xfc, 0x2, 0x4, 0x0, 0x10, 0x0, 0x8001, 0x3f, 0x7fffffff, 0x3, 0x1, 0x9, 0x0, 0x8001, 0x101, 0x0, 0x1, 0x1000, 0x4ff, 0x101, 0x1, 0x6, 0x4, 0x5, 0xd61b, 0x2, 0xffffffff], [0x80, 0x6, 0x9, 0x7, 0x6, 0x1f, 0x7, 0x3, 0x98, 0xffffffe1, 0x80, 0x1, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x5229, 0x7, 0xfff, 0xf5, 0x3, 0xc4, 0x0, 0xa7, 0x0, 0x3, 0x2, 0x2, 0x7f, 0x0, 0x0, 0x1, 0x81, 0x0, 0x6, 0x1, 0x8, 0xfffffffe, 0x0, 0x91, 0x3, 0x1f, 0x1, 0x5, 0x8, 0x4, 0x1d8, 0x3, 0x5, 0x10000, 0xc5bf, 0xffff0001, 0x401, 0xb7e, 0x800, 0x200, 0xff, 0x80000001, 0xffffffe0, 0xc492, 0x3, 0x4, 0x800], [0xea, 0x101, 0xe67, 0x93, 0xffffffff, 0x80000, 0x101, 0x8, 0x0, 0xffff, 0x7fffffff, 0x0, 0x56, 0x4, 0x80, 0x2, 0x3, 0x3ff, 0x80000000, 0x6, 0x1f, 0x141, 0x8, 0x9ea, 0x4, 0x4, 0x9, 0x9, 0x80000000, 0x4, 0x6771, 0xda04, 0x0, 0x5, 0x0, 0x10000, 0x2, 0x3, 0x10000, 0x81, 0x1, 0x2, 0xb01, 0xf4a, 0x80, 0x8, 0x8, 0xc7c, 0xfffffffb, 0x92a1, 0x0, 0x7c1, 0x5, 0x3f, 0x9, 0x5, 0x8bdc, 0x800, 0x9be5, 0x3, 0x8, 0x8000, 0x2, 0xffffffff], 0x28, [',\',\x92(!\x00', '{]\x00', '^\x00', '$\\{%\x00', ',:+\\{)),/%\x00', '^\x91}*\x00', '*%]5\x00', '\x00', '\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x800) 08:32:06 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040000}, 0x15) 08:32:06 executing program 5: socketpair(0x22, 0x3, 0x1, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = getpgid(0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfb, {0x10, 0x1, 0x1, r1, 0x7, 0xff, 0x8000, 0x5, 0x0, 0x9, 0x6}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 08:32:06 executing program 1: socketpair(0x10, 0x800, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x448, 0x3f4, 0x8, 0x70bd29, 0x25dfdbff, {0x5, 0x2, 0x25, [0x80000000, 0xfffffffa, 0x60, 0x61, 0x1, 0x1, 0x6d, 0x8, 0x0, 0x5, 0x6, 0x2e3, 0x81, 0x4, 0x4, 0x7, 0xffff0000, 0xfffffffa, 0x200, 0x0, 0x593, 0x8, 0x20, 0x1, 0x1ff, 0x0, 0x2, 0xeaf, 0x4, 0x69, 0x4, 0x4, 0x384, 0x8, 0x3, 0x4, 0x3, 0x0, 0x31fe, 0x7, 0x8, 0x2, 0x80000000, 0x6, 0x1248a3e, 0x8, 0x6, 0x7fff, 0x8, 0x2, 0xa6f6, 0x80000001, 0xffff, 0xe19, 0x6, 0x8, 0x9af9, 0x494dafac, 0x1, 0x6, 0xfff, 0x6, 0x1ff, 0xff], [0x10000, 0x273d, 0x7, 0x4, 0x0, 0x9, 0x6, 0x0, 0x5, 0x8ad6, 0x2, 0x2, 0x0, 0x8, 0x1, 0x9, 0x8001, 0x3, 0x1, 0x8, 0x20, 0x5, 0x2, 0x56baf3ca, 0x2, 0x7, 0x0, 0x7, 0x81, 0x1731, 0x0, 0x9, 0x9, 0x8, 0x5, 0x3, 0x800, 0xfc, 0x2, 0x4, 0x0, 0x10, 0x0, 0x8001, 0x3f, 0x7fffffff, 0x3, 0x1, 0x9, 0x0, 0x8001, 0x101, 0x0, 0x1, 0x1000, 0x4ff, 0x101, 0x1, 0x6, 0x4, 0x5, 0xd61b, 0x2, 0xffffffff], [0x80, 0x6, 0x9, 0x7, 0x6, 0x1f, 0x7, 0x3, 0x98, 0xffffffe1, 0x80, 0x1, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x5229, 0x7, 0xfff, 0xf5, 0x3, 0xc4, 0x0, 0xa7, 0x0, 0x3, 0x2, 0x2, 0x7f, 0x0, 0x0, 0x1, 0x81, 0x0, 0x6, 0x1, 0x8, 0xfffffffe, 0x0, 0x91, 0x3, 0x1f, 0x1, 0x5, 0x8, 0x4, 0x1d8, 0x3, 0x5, 0x10000, 0xc5bf, 0xffff0001, 0x401, 0xb7e, 0x800, 0x200, 0xff, 0x80000001, 0xffffffe0, 0xc492, 0x3, 0x4, 0x800], [0xea, 0x101, 0xe67, 0x93, 0xffffffff, 0x80000, 0x101, 0x8, 0x0, 0xffff, 0x7fffffff, 0x0, 0x56, 0x4, 0x80, 0x2, 0x3, 0x3ff, 0x80000000, 0x6, 0x1f, 0x141, 0x8, 0x9ea, 0x4, 0x4, 0x9, 0x9, 0x80000000, 0x4, 0x6771, 0xda04, 0x0, 0x5, 0x0, 0x10000, 0x2, 0x3, 0x10000, 0x81, 0x1, 0x2, 0xb01, 0xf4a, 0x80, 0x8, 0x8, 0xc7c, 0xfffffffb, 0x92a1, 0x0, 0x7c1, 0x5, 0x3f, 0x9, 0x5, 0x8bdc, 0x800, 0x9be5, 0x3, 0x8, 0x8000, 0x2, 0xffffffff], 0x28, [',\',\x92(!\x00', '{]\x00', '^\x00', '$\\{%\x00', ',:+\\{)),/%\x00', '^\x91}*\x00', '*%]5\x00', '\x00', '\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x800) 08:32:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x4}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x4}) (async) 08:32:06 executing program 4: sendmsg$AUDIT_USER_TTY(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x68, 0x464, 0x20, 0x70bd27, 0x25dfdbfc, "b23c1947d9a2ccd236f339d97ed5ff93d8f4fd92edede37a5a7c571ae84dacf435b13af49d06bd911f0014c4fd1c64ed228cca010ac3f76cb2b8073ac79dc4bb218be056b848022ef0ade5085fc5a4b855d11bc1691b2f", ["", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x40005}, 0x4800) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:06 executing program 2: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25080000000600280003000000087b3a0001040000080009000000000000003c00080000000a000900aaaaaaaaaa1100002f54ecb869182c2ebced95a7e393d62b52493bc37cd3dc547ef53581a9c6dde1527bbaa68386e3180b4712ac1053de65f62f46f31949bffe5df25a31203cb3a6aa7d9f32a4e355c99416dc6bfc1af746c874b8b823d601d8752e03f9d31f811fa1b2759367445bbd9289a1290e3cc6316b36aa77d7a31e0896d8aa33a7c2a5605c97890166db2a17ae5eecba978292d0b0d138762fb0abdd99177659a8c4ccf595126573c4df7e6afab245b0b63db7f78e863ecc31cb779319"], 0x40}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20004004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x6, r0}) 08:32:06 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x200, 0x70bd2a, 0x25dfdbfb, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24040000}, 0x15) 08:32:06 executing program 5: socketpair(0x22, 0x3, 0x1, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = getpgid(0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfb, {0x10, 0x1, 0x1, r1, 0x7, 0xff, 0x8000, 0x5, 0x0, 0x9, 0x6}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) socketpair(0x22, 0x3, 0x1, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getpgid(0x0) (async) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfb, {0x10, 0x1, 0x1, r1, 0x7, 0xff, 0x8000, 0x5, 0x0, 0x9, 0x6}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) (async) 08:32:06 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 08:32:06 executing program 1: socketpair(0x10, 0x800, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r2, 0xc0189371, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0/file0\x00'}) sendmsg$AUDIT_DEL_RULE(r3, &(0x7f0000000600)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000140)={0x448, 0x3f4, 0x8, 0x70bd29, 0x25dfdbff, {0x5, 0x2, 0x25, [0x80000000, 0xfffffffa, 0x60, 0x61, 0x1, 0x1, 0x6d, 0x8, 0x0, 0x5, 0x6, 0x2e3, 0x81, 0x4, 0x4, 0x7, 0xffff0000, 0xfffffffa, 0x200, 0x0, 0x593, 0x8, 0x20, 0x1, 0x1ff, 0x0, 0x2, 0xeaf, 0x4, 0x69, 0x4, 0x4, 0x384, 0x8, 0x3, 0x4, 0x3, 0x0, 0x31fe, 0x7, 0x8, 0x2, 0x80000000, 0x6, 0x1248a3e, 0x8, 0x6, 0x7fff, 0x8, 0x2, 0xa6f6, 0x80000001, 0xffff, 0xe19, 0x6, 0x8, 0x9af9, 0x494dafac, 0x1, 0x6, 0xfff, 0x6, 0x1ff, 0xff], [0x10000, 0x273d, 0x7, 0x4, 0x0, 0x9, 0x6, 0x0, 0x5, 0x8ad6, 0x2, 0x2, 0x0, 0x8, 0x1, 0x9, 0x8001, 0x3, 0x1, 0x8, 0x20, 0x5, 0x2, 0x56baf3ca, 0x2, 0x7, 0x0, 0x7, 0x81, 0x1731, 0x0, 0x9, 0x9, 0x8, 0x5, 0x3, 0x800, 0xfc, 0x2, 0x4, 0x0, 0x10, 0x0, 0x8001, 0x3f, 0x7fffffff, 0x3, 0x1, 0x9, 0x0, 0x8001, 0x101, 0x0, 0x1, 0x1000, 0x4ff, 0x101, 0x1, 0x6, 0x4, 0x5, 0xd61b, 0x2, 0xffffffff], [0x80, 0x6, 0x9, 0x7, 0x6, 0x1f, 0x7, 0x3, 0x98, 0xffffffe1, 0x80, 0x1, 0x9, 0x7fff, 0x0, 0x0, 0x0, 0x5229, 0x7, 0xfff, 0xf5, 0x3, 0xc4, 0x0, 0xa7, 0x0, 0x3, 0x2, 0x2, 0x7f, 0x0, 0x0, 0x1, 0x81, 0x0, 0x6, 0x1, 0x8, 0xfffffffe, 0x0, 0x91, 0x3, 0x1f, 0x1, 0x5, 0x8, 0x4, 0x1d8, 0x3, 0x5, 0x10000, 0xc5bf, 0xffff0001, 0x401, 0xb7e, 0x800, 0x200, 0xff, 0x80000001, 0xffffffe0, 0xc492, 0x3, 0x4, 0x800], [0xea, 0x101, 0xe67, 0x93, 0xffffffff, 0x80000, 0x101, 0x8, 0x0, 0xffff, 0x7fffffff, 0x0, 0x56, 0x4, 0x80, 0x2, 0x3, 0x3ff, 0x80000000, 0x6, 0x1f, 0x141, 0x8, 0x9ea, 0x4, 0x4, 0x9, 0x9, 0x80000000, 0x4, 0x6771, 0xda04, 0x0, 0x5, 0x0, 0x10000, 0x2, 0x3, 0x10000, 0x81, 0x1, 0x2, 0xb01, 0xf4a, 0x80, 0x8, 0x8, 0xc7c, 0xfffffffb, 0x92a1, 0x0, 0x7c1, 0x5, 0x3f, 0x9, 0x5, 0x8bdc, 0x800, 0x9be5, 0x3, 0x8, 0x8000, 0x2, 0xffffffff], 0x28, [',\',\x92(!\x00', '{]\x00', '^\x00', '$\\{%\x00', ',:+\\{)),/%\x00', '^\x91}*\x00', '*%]5\x00', '\x00', '\x00']}, [""]}, 0x448}, 0x1, 0x0, 0x0, 0x800}, 0x800) 08:32:06 executing program 0: socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:06 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000080)={0x4}) 08:32:06 executing program 2: socketpair(0x0, 0x4, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25080000000600280003000000087b3a0001040000080009000000000000003c00080000000a000900aaaaaaaaaa1100002f54ecb869182c2ebced95a7e393d62b52493bc37cd3dc547ef53581a9c6dde1527bbaa68386e3180b4712ac1053de65f62f46f31949bffe5df25a31203cb3a6aa7d9f32a4e355c99416dc6bfc1af746c874b8b823d601d8752e03f9d31f811fa1b2759367445bbd9289a1290e3cc6316b36aa77d7a31e0896d8aa33a7c2a5605c97890166db2a17ae5eecba978292d0b0d138762fb0abdd99177659a8c4ccf595126573c4df7e6afab245b0b63db7f78e863ecc31cb779319"], 0x40}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20004004) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000428bd7000ffdbdf25080000000600280003000000087b3a0001040000080009000000000000003c00080000000a000900aaaaaaaaaa1100002f54ecb869182c2ebced95a7e393d62b52493bc37cd3dc547ef53581a9c6dde1527bbaa68386e3180b4712ac1053de65f62f46f31949bffe5df25a31203cb3a6aa7d9f32a4e355c99416dc6bfc1af746c874b8b823d601d8752e03f9d31f811fa1b2759367445bbd9289a1290e3cc6316b36aa77d7a31e0896d8aa33a7c2a5605c97890166db2a17ae5eecba978292d0b0d138762fb0abdd99177659a8c4ccf595126573c4df7e6afab245b0b63db7f78e863ecc31cb779319"], 0x40}, 0x1, 0x0, 0x0, 0x2000c010}, 0x20004004) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x6, r0}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000040)={0x6, r0}) 08:32:06 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xe8c, 0xffffffffffffffff, 0x2}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xad5f, r0, 0x80000}) 08:32:06 executing program 5: socketpair(0x22, 0x3, 0x1, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = getpgid(0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfb, {0x10, 0x1, 0x1, r1, 0x7, 0xff, 0x8000, 0x5, 0x0, 0x9, 0x6}, ["", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000001}, 0x40) 08:32:06 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 08:32:06 executing program 0: socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:06 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0xc21b3a79d23961d3, 0x1010, r0, 0x10000000) 08:32:06 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xe8c, 0xffffffffffffffff, 0x2}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xe8c, 0xffffffffffffffff, 0x2}) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xad5f, r0, 0x80000}) 08:32:07 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, &(0x7f0000000000)=0x1, 0x4) 08:32:07 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0xc21b3a79d23961d3, 0x1010, r0, 0x10000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0xc21b3a79d23961d3, 0x1010, r0, 0x10000000) (async) 08:32:07 executing program 0: socketpair(0x18, 0x0, 0x0, &(0x7f0000000000)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:07 executing program 5: socketpair(0x10, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:32:07 executing program 2: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth1_to_batadv', 0x32, 0x33}, 0x12) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:07 executing program 1: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) (async, rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000080)={0xe8c, 0xffffffffffffffff, 0x2}) (rerun: 32) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0xad5f, r0, 0x80000}) 08:32:07 executing program 5: socketpair(0x10, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) socketpair(0x10, 0x3, 0x8, &(0x7f0000000000)) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) (async) 08:32:07 executing program 0: socketpair(0xa, 0x80000, 0x400, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000080)="85ebaa698786992d74671f5f876e134b59f9fb74f978064de8d1b4a0b406eb7c77733ed63edfc4ea262c4474fb4710c1a718f41eb08988bb1c8aceed8dff0d2e7e5f77fd82b156132c9f6a2d35641a6f3e3030f2d245dae3d69717bfb3d3be8c4286d49e18d9f4ec4e87046b3ef5fe35f09531dd8d4e3f5ab8edc339461fe4d793adf98a930772b0437119f880130774fcdb235497f30201cda3f8a3bf4622a4ee53ab1685b9e80784f9843558760c0a499c7ad15ec79d42fde7ad18f7efc340b4b91b5e8735f3c307dc026340285dc2337ca2544f7975152ceef2356f6eb3cd2e9b450a75dfe92e5421a674b5", 0xed) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0xf28) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, r3, {0x9}}, 0x18) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000002200)={0x0, r0, 0x1}) write$FUSE_POLL(r4, &(0x7f0000002240)={0x18, 0x0, r3, {0x9}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000000400e32eb21f7ecf", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) 08:32:07 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x9}}, 0x20) socket$inet_sctp(0x2, 0x16faf6a4e65a056d, 0x84) 08:32:07 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0xc21b3a79d23961d3, 0x1010, r0, 0x10000000) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xd000)=nil, 0xd000, 0xc21b3a79d23961d3, 0x1010, r0, 0x10000000) (async) 08:32:07 executing program 2: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth1_to_batadv', 0x32, 0x33}, 0x12) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:07 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) syz_io_uring_setup(0x3ebc, &(0x7f0000000100)={0x0, 0x3fca, 0x40, 0x0, 0x2af}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456}, 0x7ff) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000002480)={0x60, 0x0, r4}, 0x60) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xfdbc}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000280)=r6) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, r4, {{0x9, 0x4, 0x1}}}, 0x28) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) 08:32:07 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) (async, rerun: 32) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x9}}, 0x20) (rerun: 32) socket$inet_sctp(0x2, 0x16faf6a4e65a056d, 0x84) 08:32:07 executing program 0: socketpair(0xa, 0x80000, 0x400, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000080)="85ebaa698786992d74671f5f876e134b59f9fb74f978064de8d1b4a0b406eb7c77733ed63edfc4ea262c4474fb4710c1a718f41eb08988bb1c8aceed8dff0d2e7e5f77fd82b156132c9f6a2d35641a6f3e3030f2d245dae3d69717bfb3d3be8c4286d49e18d9f4ec4e87046b3ef5fe35f09531dd8d4e3f5ab8edc339461fe4d793adf98a930772b0437119f880130774fcdb235497f30201cda3f8a3bf4622a4ee53ab1685b9e80784f9843558760c0a499c7ad15ec79d42fde7ad18f7efc340b4b91b5e8735f3c307dc026340285dc2337ca2544f7975152ceef2356f6eb3cd2e9b450a75dfe92e5421a674b5", 0xed) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0xf28) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, r3, {0x9}}, 0x18) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000002200)={0x0, r0, 0x1}) write$FUSE_POLL(r4, &(0x7f0000002240)={0x18, 0x0, r3, {0x9}}, 0x18) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000000400e32eb21f7ecf", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) (async) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) 08:32:07 executing program 5: socketpair(0x10, 0x3, 0x8, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:32:07 executing program 2: write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000040)={'veth1_to_batadv', 0x32, 0x33}, 0x12) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:07 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) syz_io_uring_setup(0x3ebc, &(0x7f0000000100)={0x0, 0x3fca, 0x40, 0x0, 0x2af}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456}, 0x7ff) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000002480)={0x60, 0x0, r4}, 0x60) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xfdbc}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000280)=r6) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, r4, {{0x9, 0x4, 0x1}}}, 0x28) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) 08:32:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:07 executing program 4: write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000), 0x13f, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x2, 0x9}}, 0x20) socket$inet_sctp(0x2, 0x16faf6a4e65a056d, 0x84) 08:32:07 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f, 0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 08:32:07 executing program 0: socketpair(0xa, 0x80000, 0x400, &(0x7f0000000180)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) setsockopt$inet6_dccp_buf(r1, 0x21, 0xc, &(0x7f0000000080)="85ebaa698786992d74671f5f876e134b59f9fb74f978064de8d1b4a0b406eb7c77733ed63edfc4ea262c4474fb4710c1a718f41eb08988bb1c8aceed8dff0d2e7e5f77fd82b156132c9f6a2d35641a6f3e3030f2d245dae3d69717bfb3d3be8c4286d49e18d9f4ec4e87046b3ef5fe35f09531dd8d4e3f5ab8edc339461fe4d793adf98a930772b0437119f880130774fcdb235497f30201cda3f8a3bf4622a4ee53ab1685b9e80784f9843558760c0a499c7ad15ec79d42fde7ad18f7efc340b4b91b5e8735f3c307dc026340285dc2337ca2544f7975152ceef2356f6eb3cd2e9b450a75dfe92e5421a674b5", 0xed) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$FUSE(r2, &(0x7f0000002280)={0x2020, 0x0, 0x0}, 0xf28) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18, 0x0, r3, {0x9}}, 0x18) (async, rerun: 64) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000002200)={0x0, r0, 0x1}) (rerun: 64) write$FUSE_POLL(r4, &(0x7f0000002240)={0x18, 0x0, r3, {0x9}}, 0x18) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)=ANY=[@ANYBLOB="230000000400e32eb21f7ecf", @ANYRES32=r2, @ANYBLOB="01000000000000002e2f66696c653000"]) (async, rerun: 32) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r4) (rerun: 32) 08:32:07 executing program 2: socketpair(0x11, 0x801, 0x10000003, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1000, 0x1000000000000}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x453, 0x100, 0x70bd25, 0x25dfdbfb, "5f008d351d194854fa8cca6b25dc0bcf08a27a97ccc2cb1d22e1d3e7910f85fb052692d13aea7ef91a362ebe9d80f0e8fdb1eac4060eab5cc75c0a87a88e1ddf1d8979975d0d3fba8827fdb506faefec97fb3e8bb9ed9d4c3e7fd8def272493454bb002244a5e72d820d6c9b567daf6cf5c1d70b65d4f7d8b159142f2ef4c5c21bd083343ce34b414523debd3271985446358d84c94b1b478cee263d5f2a1721e6e78a04242154f368cf001eac04e637019e704c11ed46fa644d533da8efebf1a7339cb0cd068ca77b1e", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) 08:32:07 executing program 3: openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:07 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) syz_io_uring_setup(0x3ebc, &(0x7f0000000100)={0x0, 0x3fca, 0x40, 0x0, 0x2af}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000180)) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_POLL_REMOVE={0x7, 0x10, 0x0, 0x0, 0x0, 0x23456}, 0x7ff) (async, rerun: 64) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) read$FUSE(r2, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r3, &(0x7f0000002480)={0x60, 0x0, r4}, 0x60) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r2, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r0, {0xfdbc}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f0000000240)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$FUSE_DEV_IOC_CLONE(r5, 0x8004e500, &(0x7f0000000280)=r6) (async) write$FUSE_LK(r0, &(0x7f0000000040)={0x28, 0x0, r4, {{0x9, 0x4, 0x1}}}, 0x28) (async, rerun: 64) socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)) (rerun: 64) 08:32:07 executing program 4: socket$inet_sctp(0x2, 0x8338ddb0882e0995, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f01c9660f3838f366baf80cb81b1d1181ef66bafc0cec263e36650f01ca66ba2000b000ee66b87e008ee0b9800000c00f3235000800000f3066bad004edc4c26509d50f0137", 0x46}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype0={0x4, 0x4}, @flags={0x3, 0x280}], 0x2) 08:32:07 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f, 0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 08:32:07 executing program 2: socketpair(0x11, 0x801, 0x10000003, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1000, 0x1000000000000}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x453, 0x100, 0x70bd25, 0x25dfdbfb, "5f008d351d194854fa8cca6b25dc0bcf08a27a97ccc2cb1d22e1d3e7910f85fb052692d13aea7ef91a362ebe9d80f0e8fdb1eac4060eab5cc75c0a87a88e1ddf1d8979975d0d3fba8827fdb506faefec97fb3e8bb9ed9d4c3e7fd8def272493454bb002244a5e72d820d6c9b567daf6cf5c1d70b65d4f7d8b159142f2ef4c5c21bd083343ce34b414523debd3271985446358d84c94b1b478cee263d5f2a1721e6e78a04242154f368cf001eac04e637019e704c11ed46fa644d533da8efebf1a7339cb0cd068ca77b1e", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) socketpair(0x11, 0x801, 0x10000003, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1000, 0x1000000000000}) (async) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x453, 0x100, 0x70bd25, 0x25dfdbfb, "5f008d351d194854fa8cca6b25dc0bcf08a27a97ccc2cb1d22e1d3e7910f85fb052692d13aea7ef91a362ebe9d80f0e8fdb1eac4060eab5cc75c0a87a88e1ddf1d8979975d0d3fba8827fdb506faefec97fb3e8bb9ed9d4c3e7fd8def272493454bb002244a5e72d820d6c9b567daf6cf5c1d70b65d4f7d8b159142f2ef4c5c21bd083343ce34b414523debd3271985446358d84c94b1b478cee263d5f2a1721e6e78a04242154f368cf001eac04e637019e704c11ed46fa644d533da8efebf1a7339cb0cd068ca77b1e", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) (async) 08:32:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r0}, 0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) 08:32:07 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="ecffffff0002000018000000c0b8196ccccf558833cf0cb07ec87cb649c7c6224ae0080d5cea4aca8b93b6532c017d414e8b970b794803889e6c1045f7ad35aacf19b92ab3338d631193c189899e14ff7ca60d88595ea1d5e8b5c8003c5b783445cf8033861811f69b0020b3922bb374d6bbc905b58a6951ff4c29611c485f02afca29dcf5c8fa42d3661cef756a3b8f9bb9a95cbc1698217f86", @ANYRES32, @ANYRES16]) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:07 executing program 4: socket$inet_sctp(0x2, 0x8338ddb0882e0995, 0x84) (async) socket$inet_sctp(0x2, 0x8338ddb0882e0995, 0x84) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f01c9660f3838f366baf80cb81b1d1181ef66bafc0cec263e36650f01ca66ba2000b000ee66b87e008ee0b9800000c00f3235000800000f3066bad004edc4c26509d50f0137", 0x46}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype0={0x4, 0x4}, @flags={0x3, 0x280}], 0x2) 08:32:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5b}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) 08:32:07 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7f, 0x1}}, './file0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00'}) 08:32:07 executing program 2: socketpair(0x11, 0x801, 0x10000003, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1000, 0x1000000000000}) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x453, 0x100, 0x70bd25, 0x25dfdbfb, "5f008d351d194854fa8cca6b25dc0bcf08a27a97ccc2cb1d22e1d3e7910f85fb052692d13aea7ef91a362ebe9d80f0e8fdb1eac4060eab5cc75c0a87a88e1ddf1d8979975d0d3fba8827fdb506faefec97fb3e8bb9ed9d4c3e7fd8def272493454bb002244a5e72d820d6c9b567daf6cf5c1d70b65d4f7d8b159142f2ef4c5c21bd083343ce34b414523debd3271985446358d84c94b1b478cee263d5f2a1721e6e78a04242154f368cf001eac04e637019e704c11ed46fa644d533da8efebf1a7339cb0cd068ca77b1e", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) socketpair(0x11, 0x801, 0x10000003, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x1000, 0x1000000000000}) (async) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xdc, 0x453, 0x100, 0x70bd25, 0x25dfdbfb, "5f008d351d194854fa8cca6b25dc0bcf08a27a97ccc2cb1d22e1d3e7910f85fb052692d13aea7ef91a362ebe9d80f0e8fdb1eac4060eab5cc75c0a87a88e1ddf1d8979975d0d3fba8827fdb506faefec97fb3e8bb9ed9d4c3e7fd8def272493454bb002244a5e72d820d6c9b567daf6cf5c1d70b65d4f7d8b159142f2ef4c5c21bd083343ce34b414523debd3271985446358d84c94b1b478cee263d5f2a1721e6e78a04242154f368cf001eac04e637019e704c11ed46fa644d533da8efebf1a7339cb0cd068ca77b1e", ["", ""]}, 0xdc}, 0x1, 0x0, 0x0, 0xc0}, 0x8800) (async) 08:32:07 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r3 = memfd_create(&(0x7f0000000080)='*.(\xa7+\'@%-+(+P${#(]\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffff000000000000000100000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000100000000f0ffffffff", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff00f0ffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000400000000000000000010100000000", @ANYRES32=r4, @ANYBLOB="0081000000400000000000800000009e733a0002"]) 08:32:07 executing program 4: socket$inet_sctp(0x2, 0x8338ddb0882e0995, 0x84) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000000)="0f01c9660f3838f366baf80cb81b1d1181ef66bafc0cec263e36650f01ca66ba2000b000ee66b87e008ee0b9800000c00f3235000800000f3066bad004edc4c26509d50f0137", 0x46}], 0x1, 0x2, &(0x7f00000000c0)=[@cstype0={0x4, 0x4}, @flags={0x3, 0x280}], 0x2) 08:32:07 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="ecffffff0002000018000000c0b8196ccccf558833cf0cb07ec87cb649c7c6224ae0080d5cea4aca8b93b6532c017d414e8b970b794803889e6c1045f7ad35aacf19b92ab3338d631193c189899e14ff7ca60d88595ea1d5e8b5c8003c5b783445cf8033861811f69b0020b3922bb374d6bbc905b58a6951ff4c29611c485f02afca29dcf5c8fa42d3661cef756a3b8f9bb9a95cbc1698217f86", @ANYRES32, @ANYRES16]) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5b}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) 08:32:07 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) r3 = memfd_create(&(0x7f0000000080)='*.(\xa7+\'@%-+(+P${#(]\x00', 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffff000000000000000100000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000100000000f0ffffffff", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff00f0ffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000400000000000000000010100000000", @ANYRES32=r4, @ANYBLOB="0081000000400000000000800000009e733a0002"]) 08:32:07 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) socketpair(0x25, 0x2, 0x800, &(0x7f0000000040)) 08:32:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) socketpair(0x11, 0x80000, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8048086) r2 = io_uring_setup(0x7ebd, &(0x7f0000000040)={0x0, 0x5182, 0x200, 0x0, 0xf8}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0x6, r2}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:07 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/44, 0x2c}, {&(0x7f0000001180)=""/160, 0xa0}, {&(0x7f0000001240)=""/190, 0xbe}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/226, 0xe2}, {&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)=""/132, 0x84}], 0x9, 0x0, 0x0, 0x20000000}, 0x0) 08:32:07 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) (async) socketpair(0x11, 0x80000, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8048086) (async) r2 = io_uring_setup(0x7ebd, &(0x7f0000000040)={0x0, 0x5182, 0x200, 0x0, 0xf8}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0x6, r2}) (async, rerun: 64) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (rerun: 64) 08:32:07 executing program 0: bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000100)=ANY=[@ANYBLOB="ecffffff0002000018000000c0b8196ccccf558833cf0cb07ec87cb649c7c6224ae0080d5cea4aca8b93b6532c017d414e8b970b794803889e6c1045f7ad35aacf19b92ab3338d631193c189899e14ff7ca60d88595ea1d5e8b5c8003c5b783445cf8033861811f69b0020b3922bb374d6bbc905b58a6951ff4c29611c485f02afca29dcf5c8fa42d3661cef756a3b8f9bb9a95cbc1698217f86", @ANYRES32, @ANYRES16]) (async, rerun: 64) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (rerun: 64) 08:32:07 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x5b}}, './file0\x00'}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x1}) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x10, r0, 0x10000000) 08:32:08 executing program 1: socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) r3 = memfd_create(&(0x7f0000000080)='*.(\xa7+\'@%-+(+P${#(]\x00', 0x2) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffff000000000000000100000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000100000000f0ffffffff", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff00f0ffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000400000000000000000010100000000", @ANYRES32=r4, @ANYBLOB="0081000000400000000000800000009e733a0002"]) (async) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000005000000", @ANYRES32=r1, @ANYBLOB="0000000000f0ffff000000000000000100000000", @ANYRES32=r2, @ANYBLOB="000000000000000000000100000000f0ffffffff", @ANYRES32, @ANYBLOB="00000000000000f0ffffffff00f0ffff00000000", @ANYRES32=r3, @ANYBLOB="0000000000400000000000000000010100000000", @ANYRES32=r4, @ANYBLOB="0081000000400000000000800000009e733a0002"]) 08:32:08 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) socketpair(0x25, 0x2, 0x800, &(0x7f0000000040)) 08:32:08 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x2, '`\a'}, 0x3) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 08:32:08 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/44, 0x2c}, {&(0x7f0000001180)=""/160, 0xa0}, {&(0x7f0000001240)=""/190, 0xbe}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/226, 0xe2}, {&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)=""/132, 0x84}], 0x9, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/44, 0x2c}, {&(0x7f0000001180)=""/160, 0xa0}, {&(0x7f0000001240)=""/190, 0xbe}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/226, 0xe2}, {&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)=""/132, 0x84}], 0x9, 0x0, 0x0, 0x20000000}, 0x0) 08:32:08 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) socketpair(0x11, 0x80000, 0x5, &(0x7f0000000100)={0xffffffffffffffff}) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8048086) r2 = io_uring_setup(0x7ebd, &(0x7f0000000040)={0x0, 0x5182, 0x200, 0x0, 0xf8}) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0x6, r2}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x800}}, './file0\x00'}) (async) socketpair(0x11, 0x80000, 0x5, &(0x7f0000000100)) (async) sendmsg$AUDIT_SIGNAL_INFO(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3f2, 0x4, 0x70bd26, 0x25dfdbfe, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x8048086) (async) io_uring_setup(0x7ebd, &(0x7f0000000040)={0x0, 0x5182, 0x200, 0x0, 0xf8}) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000000c0)={0x6, r2}) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) 08:32:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x2010, r0, 0x73000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x4010, r1, 0x10000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc0000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x40010) 08:32:08 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$rds(r0, &(0x7f0000001640)={&(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10, &(0x7f0000001580)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/136, 0x88}, {&(0x7f0000001140)=""/44, 0x2c}, {&(0x7f0000001180)=""/160, 0xa0}, {&(0x7f0000001240)=""/190, 0xbe}, {&(0x7f0000001300)=""/106, 0x6a}, {&(0x7f0000001380)=""/226, 0xe2}, {&(0x7f0000001480)=""/50, 0x32}, {&(0x7f00000014c0)=""/132, 0x84}], 0x9, 0x0, 0x0, 0x20000000}, 0x0) 08:32:08 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x2, '`\a'}, 0x3) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 08:32:08 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r0, 0xc01064c2, &(0x7f0000000000)) socketpair(0x25, 0x2, 0x800, &(0x7f0000000040)) (async) socketpair(0x25, 0x2, 0x800, &(0x7f0000000040)) 08:32:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x2010, r0, 0x73000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x4010, r1, 0x10000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc0000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x40010) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x2010, r0, 0x73000) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x4010, r1, 0x10000000) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) (async) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc0000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x40010) (async) 08:32:08 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 08:32:08 executing program 1: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x1}}, './file0\x00'}) sendmsg$AUDIT_GET(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3e8, 0x200, 0x70bd28, 0x25dfdbfe, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x44000}, 0x0) bind$can_j1939(r2, &(0x7f0000000080)={0x1d, 0x0, 0x40e, {0x0, 0xf0, 0x4}, 0x1}, 0x18) 08:32:08 executing program 5: socketpair(0x2, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000008003100030000000500290001000000080034000000000008002c00000100000000ae577f376871e91048e875f3cdd18ab4d37586071a12c025f89977921b197a24f8f6712bb2c386a46bb065c57ef9799f11631c9346eaba"], 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) 08:32:08 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xaa) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 08:32:08 executing program 1: socketpair(0x2, 0xa, 0xf3, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x60}}, 0x4008000) 08:32:08 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x2, '`\a'}, 0x3) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r0, 0x114, 0xa, &(0x7f0000000040)={0x2, '`\a'}, 0x3) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) (async) 08:32:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) mmap$fb(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0xc, 0x2010, r0, 0x73000) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x5, 0x4010, r1, 0x10000000) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r1) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r2, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xc0000000}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80000}, 0x40010) 08:32:08 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) 08:32:08 executing program 1: socketpair(0x2, 0xa, 0xf3, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x60}}, 0x4008000) 08:32:08 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xaa) (async) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 08:32:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x0, 0x13, 0x4, 0x6, 0x7a, 0x4, &(0x7f0000000200)="d8782ad55a0b94c7d7225a471353e8f3aab9198ec95e094287ad8b7d0acb72c6d29f98156865e82aebdc0f3798790ed0c8bdc473e2ef278c364ec606d6ac2f9bc15973de04656479a699067918e87bff8b88e614a5de2b082a300fec14559713cc37314fccb32547927e40b51d4f4684ea1bb907c03cfe199856"}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, &(0x7f0000000080)={r2, r3+60000000}, 0x1, 0x1, 0x3ac7f6e2aa6bebad}, 0xdc6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x2, 0x80000001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f00000001c0)={0x3, "441a68"}, 0x4) 08:32:08 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x570afb43}}, './file0\x00'}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000002c0)={0x8, 0x6, 0xff, 0xc80}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e8ffff2f00"/16]) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_dccp_buf(r7, 0x21, 0xc, &(0x7f0000000100)="977ade3d5ae002b120de71b87b6811ac4c92666914cc59db87f38a9fafd6769a5f6b9fd64e8fca356d500b49e7035d2ed2ed955bb9cc711f1bc6e95c75c5a375a01b8509ba05a168d3b30923fbbc3a0dcbafaf79118b9dcf631d89afd718f392163ba3b8b18b9f7fffce8d7b2e37", 0x6e) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9, {0x80}}, './file0\x00'}) 08:32:08 executing program 1: socketpair(0x2, 0xa, 0xf3, &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x6}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0xa000}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8000}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x6}]}, 0x60}}, 0x4008000) 08:32:08 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) 08:32:08 executing program 5: socketpair(0x2, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000008003100030000000500290001000000080034000000000008002c00000100000000ae577f376871e91048e875f3cdd18ab4d37586071a12c025f89977921b197a24f8f6712bb2c386a46bb065c57ef9799f11631c9346eaba"], 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) 08:32:08 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) epoll_wait(0xffffffffffffffff, 0x0, 0x0, 0xaa) (async) getsockopt$SO_J1939_ERRQUEUE(r0, 0x6b, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)) 08:32:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) (async) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x0, 0x13, 0x4, 0x6, 0x7a, 0x4, &(0x7f0000000200)="d8782ad55a0b94c7d7225a471353e8f3aab9198ec95e094287ad8b7d0acb72c6d29f98156865e82aebdc0f3798790ed0c8bdc473e2ef278c364ec606d6ac2f9bc15973de04656479a699067918e87bff8b88e614a5de2b082a300fec14559713cc37314fccb32547927e40b51d4f4684ea1bb907c03cfe199856"}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, &(0x7f0000000080)={r2, r3+60000000}, 0x1, 0x1, 0x3ac7f6e2aa6bebad}, 0xdc6) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x2, 0x80000001}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f00000001c0)={0x3, "441a68"}, 0x4) 08:32:08 executing program 1: socketpair(0x2, 0xa, 0xf3, &(0x7f0000000000)) 08:32:08 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x570afb43}}, './file0\x00'}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000002c0)={0x8, 0x6, 0xff, 0xc80}) (async) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000002c0)={0x8, 0x6, 0xff, 0xc80}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e8ffff2f00"/16]) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_dccp_buf(r7, 0x21, 0xc, &(0x7f0000000100)="977ade3d5ae002b120de71b87b6811ac4c92666914cc59db87f38a9fafd6769a5f6b9fd64e8fca356d500b49e7035d2ed2ed955bb9cc711f1bc6e95c75c5a375a01b8509ba05a168d3b30923fbbc3a0dcbafaf79118b9dcf631d89afd718f392163ba3b8b18b9f7fffce8d7b2e37", 0x6e) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9, {0x80}}, './file0\x00'}) 08:32:08 executing program 4: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x3, 0x2, 0x8, 0x0, 0x8, 0x402, {0x3, 0x800, 0x4, 0x6, 0x10000, 0x7, 0x7, 0x8, 0xff, 0x8000, 0x16, 0xee01, 0xee00, 0x401, 0xffffffff}}}, 0x90) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0x0}}, './file0\x00'}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) getgroups(0x1, &(0x7f0000000200)=[0x0]) r7 = getuid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)={0x1f0, 0x0, r3, [{{0x3, 0x2, 0x40, 0x0, 0x8, 0x3, {0x6, 0xffff, 0xffffffff, 0x3, 0x400, 0x7, 0x2, 0x9, 0x5, 0xc000, 0x9, 0x0, r4, 0x7, 0xfffffff7}}, {0x1, 0x3, 0x1, 0xffffffff, '['}}, {{0x4, 0x1, 0x7, 0x9, 0x81, 0x3, {0x1, 0x7ff, 0x80000000, 0x0, 0x6, 0x3ff, 0xfff, 0x1, 0xfff, 0x1000, 0x552fda6e, r5, r6, 0xff80, 0x7}}, {0x0, 0x1, 0x1, 0xffff0000, '#'}}, {{0x0, 0x3, 0x9, 0x7fff, 0x8, 0xb322, {0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x2, 0x3, 0x3f, 0x8000, 0x7f, r7, 0xee01, 0x1, 0x3c}}, {0x3, 0x4, 0x8, 0x10001, '--%\xff$-/('}}]}, 0x1f0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x6, 0x0, 0x2, &(0x7f00000000c0)) 08:32:08 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000080)=""/31, &(0x7f00000000c0)=0x1f) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) socketpair(0x31f58334be5eacc5, 0x3, 0x8, &(0x7f0000000040)) 08:32:08 executing program 4: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x3, 0x2, 0x8, 0x0, 0x8, 0x402, {0x3, 0x800, 0x4, 0x6, 0x10000, 0x7, 0x7, 0x8, 0xff, 0x8000, 0x16, 0xee01, 0xee00, 0x401, 0xffffffff}}}, 0x90) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0x0}}, './file0\x00'}) (async) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) getgroups(0x1, &(0x7f0000000200)=[0x0]) r7 = getuid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)={0x1f0, 0x0, r3, [{{0x3, 0x2, 0x40, 0x0, 0x8, 0x3, {0x6, 0xffff, 0xffffffff, 0x3, 0x400, 0x7, 0x2, 0x9, 0x5, 0xc000, 0x9, 0x0, r4, 0x7, 0xfffffff7}}, {0x1, 0x3, 0x1, 0xffffffff, '['}}, {{0x4, 0x1, 0x7, 0x9, 0x81, 0x3, {0x1, 0x7ff, 0x80000000, 0x0, 0x6, 0x3ff, 0xfff, 0x1, 0xfff, 0x1000, 0x552fda6e, r5, r6, 0xff80, 0x7}}, {0x0, 0x1, 0x1, 0xffff0000, '#'}}, {{0x0, 0x3, 0x9, 0x7fff, 0x8, 0xb322, {0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x2, 0x3, 0x3f, 0x8000, 0x7f, r7, 0xee01, 0x1, 0x3c}}, {0x3, 0x4, 0x8, 0x10001, '--%\xff$-/('}}]}, 0x1f0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socketpair(0x6, 0x0, 0x2, &(0x7f00000000c0)) 08:32:08 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000280)={0x0, 0x13, 0x4, 0x6, 0x7a, 0x4, &(0x7f0000000200)="d8782ad55a0b94c7d7225a471353e8f3aab9198ec95e094287ad8b7d0acb72c6d29f98156865e82aebdc0f3798790ed0c8bdc473e2ef278c364ec606d6ac2f9bc15973de04656479a699067918e87bff8b88e614a5de2b082a300fec14559713cc37314fccb32547927e40b51d4f4684ea1bb907c03cfe199856"}) (async) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) syz_io_uring_submit(0x0, r1, &(0x7f0000000100)=@IORING_OP_LINK_TIMEOUT={0xf, 0x41, 0x0, 0x0, 0x0, &(0x7f0000000080)={r2, r3+60000000}, 0x1, 0x1, 0x3ac7f6e2aa6bebad}, 0xdc6) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000140)={{0x1, 0x1, 0x18, r4, {0x2, 0x80000001}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r0, 0xc0189372, &(0x7f0000000180)={{0x1, 0x1, 0x18, r4, {0x3}}, './file0\x00'}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f00000001c0)={0x3, "441a68"}, 0x4) 08:32:08 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000280)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x570afb43}}, './file0\x00'}) ioctl$VIDIOC_EXPBUF(r3, 0xc0405610, &(0x7f00000002c0)={0x8, 0x6, 0xff, 0xc80}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e8ffff2f00"/16]) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r4, @ANYBLOB="e8ffff2f00"/16]) getsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$inet6_dccp_buf(r7, 0x21, 0xc, &(0x7f0000000100)="977ade3d5ae002b120de71b87b6811ac4c92666914cc59db87f38a9fafd6769a5f6b9fd64e8fca356d500b49e7035d2ed2ed955bb9cc711f1bc6e95c75c5a375a01b8509ba05a168d3b30923fbbc3a0dcbafaf79118b9dcf631d89afd718f392163ba3b8b18b9f7fffce8d7b2e37", 0x6e) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r5, 0xc0189374, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r9, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r8, 0xc0189372, &(0x7f0000000240)={{0x1, 0x1, 0x18, r9, {0x80}}, './file0\x00'}) 08:32:08 executing program 1: socketpair(0x0, 0xa, 0xf3, &(0x7f0000000000)) 08:32:08 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000080)=""/31, &(0x7f00000000c0)=0x1f) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) socketpair(0x31f58334be5eacc5, 0x3, 0x8, &(0x7f0000000040)) 08:32:09 executing program 5: socketpair(0x2, 0x80000, 0x9, &(0x7f0000000040)={0xffffffffffffffff}) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$BATADV_CMD_SET_VLAN(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000008003100030000000500290001000000080034000000000008002c00000100000000ae577f376871e91048e875f3cdd18ab4d37586071a12c025f89977921b197a24f8f6712bb2c386a46bb065c57ef9799f11631c9346eaba"], 0x34}, 0x1, 0x0, 0x0, 0x4000041}, 0x4000000) 08:32:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x81, r3}) sendmsg$rds(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x48840}, 0x24004000) 08:32:09 executing program 1: socketpair(0x0, 0xa, 0xf3, &(0x7f0000000000)) 08:32:09 executing program 4: write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000000)={0x90, 0x0, 0x0, {0x3, 0x2, 0x8, 0x0, 0x8, 0x402, {0x3, 0x800, 0x4, 0x6, 0x10000, 0x7, 0x7, 0x8, 0xff, 0x8000, 0x16, 0xee01, 0xee00, 0x401, 0xffffffff}}}, 0x90) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) (async) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r1, &(0x7f0000000340)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r2, &(0x7f0000002480)={0x60, 0x0, r3}, 0x60) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee00, 0x0}}, './file0\x00'}) getresuid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) getgroups(0x1, &(0x7f0000000200)=[0x0]) r7 = getuid() write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)={0x1f0, 0x0, r3, [{{0x3, 0x2, 0x40, 0x0, 0x8, 0x3, {0x6, 0xffff, 0xffffffff, 0x3, 0x400, 0x7, 0x2, 0x9, 0x5, 0xc000, 0x9, 0x0, r4, 0x7, 0xfffffff7}}, {0x1, 0x3, 0x1, 0xffffffff, '['}}, {{0x4, 0x1, 0x7, 0x9, 0x81, 0x3, {0x1, 0x7ff, 0x80000000, 0x0, 0x6, 0x3ff, 0xfff, 0x1, 0xfff, 0x1000, 0x552fda6e, r5, r6, 0xff80, 0x7}}, {0x0, 0x1, 0x1, 0xffff0000, '#'}}, {{0x0, 0x3, 0x9, 0x7fff, 0x8, 0xb322, {0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x2, 0x3, 0x3f, 0x8000, 0x7f, r7, 0xee01, 0x1, 0x3c}}, {0x3, 0x4, 0x8, 0x10001, '--%\xff$-/('}}]}, 0x1f0) (async) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000240)={0x1f0, 0x0, r3, [{{0x3, 0x2, 0x40, 0x0, 0x8, 0x3, {0x6, 0xffff, 0xffffffff, 0x3, 0x400, 0x7, 0x2, 0x9, 0x5, 0xc000, 0x9, 0x0, r4, 0x7, 0xfffffff7}}, {0x1, 0x3, 0x1, 0xffffffff, '['}}, {{0x4, 0x1, 0x7, 0x9, 0x81, 0x3, {0x1, 0x7ff, 0x80000000, 0x0, 0x6, 0x3ff, 0xfff, 0x1, 0xfff, 0x1000, 0x552fda6e, r5, r6, 0xff80, 0x7}}, {0x0, 0x1, 0x1, 0xffff0000, '#'}}, {{0x0, 0x3, 0x9, 0x7fff, 0x8, 0xb322, {0x6, 0x0, 0x7, 0x0, 0x0, 0x401, 0x2, 0x3, 0x3f, 0x8000, 0x7f, r7, 0xee01, 0x1, 0x3c}}, {0x3, 0x4, 0x8, 0x10001, '--%\xff$-/('}}]}, 0x1f0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$inet_sctp(0x2, 0x1, 0x84) socketpair(0x6, 0x0, 0x2, &(0x7f00000000c0)) 08:32:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000080)=""/31, &(0x7f00000000c0)=0x1f) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) socketpair(0x31f58334be5eacc5, 0x3, 0x8, &(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000080)=""/31, &(0x7f00000000c0)=0x1f) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x31f58334be5eacc5, 0x3, 0x8, &(0x7f0000000040)) (async) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) socketpair(0x10, 0x6, 0xffffff81, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {&(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000140)}, 0xa0) 08:32:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x81, r3}) sendmsg$rds(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x48840}, 0x24004000) 08:32:09 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0570, 0x84) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) socketpair(0x10, 0x6, 0xffffff81, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {&(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000140)}, 0xa0) 08:32:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ec8752fff88fcfab", @ANYRES32=r1, @ANYBLOB="ff010000000000002e2f66696c653000"]) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x1}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:09 executing program 0: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000003c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r0, 0xc0189371, &(0x7f0000000440)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f0000000480)={{0x1, 0x1, 0x18, r2, {r0}}, './file0\x00'}) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) (async) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000400), 0x2, 0x0) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x81, r3}) sendmsg$rds(r4, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000180)=""/251, 0xfb}, {&(0x7f0000000280)=""/150, 0x96}], 0x3, 0x0, 0x0, 0x48840}, 0x24004000) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) socketpair(0x10, 0x6, 0xffffff81, &(0x7f0000000080)={0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000180)={@l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, 0x4}, {&(0x7f00000000c0)=""/76, 0x4c}, &(0x7f0000000140)}, 0xa0) 08:32:09 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0570, 0x84) socket$inet_sctp(0x2, 0x16faf6a4e65a0570, 0x84) (async) 08:32:09 executing program 5: socketpair(0x2a, 0x1, 0x0, &(0x7f0000000000)) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 08:32:09 executing program 1: socketpair(0x0, 0xa, 0xf3, &(0x7f0000000000)) 08:32:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ec8752fff88fcfab", @ANYRES32=r1, @ANYBLOB="ff010000000000002e2f66696c653000"]) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x1}) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) (async) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:09 executing program 0: socketpair(0xa, 0x6, 0x403, &(0x7f0000000040)) 08:32:09 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0570, 0x84) socket$inet_sctp(0x2, 0x16faf6a4e65a0570, 0x84) (async) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) socketpair(0x10, 0x6, 0xffffff81, &(0x7f0000000080)) 08:32:09 executing program 4: socketpair(0x11, 0x1, 0xfffffff7, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:09 executing program 0: socketpair(0xa, 0x6, 0x403, &(0x7f0000000040)) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) 08:32:09 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ec8752fff88fcfab", @ANYRES32=r1, @ANYBLOB="ff010000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ec8752fff88fcfab", @ANYRES32=r1, @ANYBLOB="ff010000000000002e2f66696c653000"]) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x1}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:09 executing program 5: socketpair(0x2a, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000040)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 08:32:09 executing program 0: socketpair(0xa, 0x6, 0x403, &(0x7f0000000040)) 08:32:09 executing program 4: socketpair(0x11, 0x1, 0xfffffff7, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) socketpair(0x11, 0x1, 0xfffffff7, &(0x7f0000000000)) (async) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) 08:32:09 executing program 1: socketpair(0x2, 0x0, 0xf3, &(0x7f0000000000)) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) 08:32:09 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$FUSE(r1, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004640), &(0x7f00000046c0)={&(0x7f0000004680)={[0x2]}, 0x8}) write$FUSE_DIRENT(r2, &(0x7f00000004c0)={0x30, 0xfffffffffffffffe, r3, [{0x6, 0x80, 0x3, 0x9, '{-#'}]}, 0x30) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000580)) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000e5000000", @ANYRES32=r5, @ANYBLOB="ffff0000000000002e2f66696c653000"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000440)={{&(0x7f0000000380)=""/128, 0x80}, &(0x7f0000000400), 0xf}, 0x20) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff071}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) 08:32:09 executing program 5: socketpair(0x2a, 0x1, 0x0, &(0x7f0000000000)) (async) ioctl$FBIOGET_VSCREENINFO(0xffffffffffffffff, 0x4600, &(0x7f0000000040)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) 08:32:09 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) syz_io_uring_setup(0x73ac, &(0x7f0000000040)={0x0, 0x86dc, 0x200, 0x1, 0x170}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x2b96, &(0x7f0000000140)={0x0, 0x2d8d, 0x800, 0x0, 0x2ce}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="692be6f7fed9dd53d6f2720e2ebc3f370b96a67da20a3b590c5d0ab5594a018124db36e5c1a4bd8dba75870638ed7cecac44f8beeb975431b3ac37ca98d626bafbac2c4637a377fb3a9c43cc1b9b5f6f8ea67c9fb4deaa66aac5f12376f976bdf67754adb35bba02a41c4cf2b6cef8e839b60885db8612ab9743a6e82b2b4212c6a0a504556748a325839ae6e397f485d01f66009abd9149840a98", 0xffffff80, 0x0, 0x0, {0x1}}, 0x8) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x3000000, 0x20010, r2, 0x10000000) read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) socketpair(0x1d, 0x1, 0x3f, &(0x7f0000000340)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f0000000380)={r5, r6, 0xcb}) 08:32:09 executing program 4: socketpair(0x11, 0x1, 0xfffffff7, &(0x7f0000000000)) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)) 08:32:09 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$FUSE(r1, &(0x7f00000007c0)={0x2020}, 0x2020) (async) read$FUSE(r1, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004640), &(0x7f00000046c0)={&(0x7f0000004680)={[0x2]}, 0x8}) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004640), &(0x7f00000046c0)={&(0x7f0000004680)={[0x2]}, 0x8}) write$FUSE_DIRENT(r2, &(0x7f00000004c0)={0x30, 0xfffffffffffffffe, r3, [{0x6, 0x80, 0x3, 0x9, '{-#'}]}, 0x30) (async) write$FUSE_DIRENT(r2, &(0x7f00000004c0)={0x30, 0xfffffffffffffffe, r3, [{0x6, 0x80, 0x3, 0x9, '{-#'}]}, 0x30) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000580)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000e5000000", @ANYRES32=r5, @ANYBLOB="ffff0000000000002e2f66696c653000"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000440)={{&(0x7f0000000380)=""/128, 0x80}, &(0x7f0000000400), 0xf}, 0x20) (async) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000440)={{&(0x7f0000000380)=""/128, 0x80}, &(0x7f0000000400), 0xf}, 0x20) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff071}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) 08:32:09 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)=""/110, &(0x7f00000000c0)=0x6e) 08:32:09 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) syz_io_uring_setup(0x73ac, &(0x7f0000000040)={0x0, 0x86dc, 0x200, 0x1, 0x170}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) (async) syz_io_uring_setup(0x2b96, &(0x7f0000000140)={0x0, 0x2d8d, 0x800, 0x0, 0x2ce}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="692be6f7fed9dd53d6f2720e2ebc3f370b96a67da20a3b590c5d0ab5594a018124db36e5c1a4bd8dba75870638ed7cecac44f8beeb975431b3ac37ca98d626bafbac2c4637a377fb3a9c43cc1b9b5f6f8ea67c9fb4deaa66aac5f12376f976bdf67754adb35bba02a41c4cf2b6cef8e839b60885db8612ab9743a6e82b2b4212c6a0a504556748a325839ae6e397f485d01f66009abd9149840a98", 0xffffff80, 0x0, 0x0, {0x1}}, 0x8) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x3000000, 0x20010, r2, 0x10000000) (async) read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) (async) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) (async) socketpair(0x1d, 0x1, 0x3f, &(0x7f0000000340)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f0000000380)={r5, r6, 0xcb}) 08:32:09 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x43c, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfb, {0x4, 0x0, 0x4, [0x8, 0x800, 0x52f2b916, 0x81, 0x7f, 0x5, 0x9, 0xffffff80, 0x4, 0x7f, 0x3, 0xfffff000, 0x5, 0x3ff, 0x5, 0xffffffff, 0xee9, 0x6, 0x0, 0x8, 0xffff0271, 0x8, 0x800, 0x10000, 0x1, 0x7, 0x8, 0x0, 0xf0, 0x0, 0x800, 0x80, 0x80000000, 0x40, 0x39c8, 0x7, 0x1086120d, 0xfffffffa, 0x0, 0x2, 0x2000, 0xfffffc01, 0x80, 0x400, 0x5, 0x8, 0x8, 0x5, 0x3, 0x1, 0xffffff57, 0xf5d, 0x4, 0x2, 0x544, 0x5, 0x200, 0x1, 0x54, 0x6, 0x0, 0x3, 0x1f, 0x2], [0x80, 0xff, 0x51, 0x0, 0x5, 0x7, 0xed3, 0x7fff, 0x3, 0x7, 0x55, 0x8, 0x9, 0x956b, 0x3, 0x2, 0x9, 0x0, 0xfdf, 0x600, 0x6, 0xd778, 0x7f, 0x2, 0x4, 0x0, 0x9, 0x0, 0x94a, 0x7, 0x3f, 0xcbd, 0x8001, 0x1, 0x6, 0x3b19, 0x10000, 0x3, 0x8, 0x3, 0x401, 0xd77, 0x80000000, 0x7f, 0x7, 0x4, 0x2, 0x590, 0xfffffffe, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x7, 0x0, 0x10001, 0x494, 0xb8, 0x7fff, 0x8001, 0x400, 0x3, 0xfff], [0x0, 0x400, 0x80000000, 0x1, 0x2, 0x3, 0x1, 0x2, 0x5e8d, 0x8000, 0x0, 0x1, 0x1, 0x6, 0xff, 0x81, 0x2f22be70, 0x6a, 0x80000001, 0xfffffffa, 0x8001, 0xfffffc00, 0xfff, 0x1f, 0x7, 0x14, 0x5, 0x4, 0x7fff, 0x3, 0x4, 0x1d3, 0xffff8000, 0xcda7, 0x848, 0x1, 0x800, 0x8, 0xff, 0x2, 0x5, 0x7fffffff, 0x6, 0xffff76fb, 0x9, 0x400, 0x7fff, 0x9, 0xb02d, 0x200, 0x4, 0x1, 0x401, 0xffff, 0xfffffff7, 0x7fffffff, 0x10000, 0x4, 0x8000, 0x2, 0xfffffffc, 0x3, 0x0, 0x7], [0xfffffffa, 0x10000, 0x1f, 0xcb4c, 0x59a74c7d, 0x8, 0x401, 0x2, 0x3, 0x101, 0x2, 0x2dc8b93, 0x8, 0x5, 0x1, 0x1f, 0xffffffff, 0x0, 0x4, 0x1, 0x1f, 0x2, 0xffffffff, 0x100, 0x2, 0x0, 0xaa, 0x7c1675ae, 0x7f, 0x401, 0x80, 0x10000, 0x5, 0x10001, 0x9, 0x8, 0x1, 0x8001, 0x9, 0x9, 0x1, 0x1ff, 0x10001, 0x2, 0x20, 0x1f, 0xfffffff7, 0xffffffff, 0x8001, 0xce1, 0x6, 0x1, 0x2, 0x0, 0x7f, 0x9, 0x1, 0x7f, 0x200, 0x2eeb, 0x1000, 0x47e1678d, 0x1ff, 0x6], 0x19, ['&-\x00', '\x93T&\x00', '\x00', '^\x00', '\x00', '#):!\\})%%\xb9#\x00', '}\x00']}, ["", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000010}, 0x28004004) 08:32:09 executing program 3: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)) 08:32:10 executing program 1: socketpair(0x2, 0x0, 0xf3, &(0x7f0000000000)) 08:32:10 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) read$FUSE(r1, &(0x7f00000007c0)={0x2020, 0x0, 0x0}, 0x2020) (async) pselect6(0x0, 0x0, 0x0, 0x0, &(0x7f0000004640), &(0x7f00000046c0)={&(0x7f0000004680)={[0x2]}, 0x8}) write$FUSE_DIRENT(r2, &(0x7f00000004c0)={0x30, 0xfffffffffffffffe, r3, [{0x6, 0x80, 0x3, 0x9, '{-#'}]}, 0x30) (async) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x44, 0x0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @multicast}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x80000000}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x44}}, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) ioctl$FBIOGET_VSCREENINFO(r4, 0x4600, &(0x7f0000000580)) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000500)=ANY=[@ANYBLOB="02000000e5000000", @ANYRES32=r5, @ANYBLOB="ffff0000000000002e2f66696c653000"]) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r1, 0xc018937d, &(0x7f0000000540)={{0x1, 0x1, 0x18, r6, {0x2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000340)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r7, 0xc018937c, &(0x7f0000000480)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) setsockopt$RDS_GET_MR(r7, 0x114, 0x2, &(0x7f0000000440)={{&(0x7f0000000380)=""/128, 0x80}, &(0x7f0000000400), 0xf}, 0x20) (async) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r8, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, 0x0, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3ff}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffff071}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x44}}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r1) 08:32:10 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)=""/110, &(0x7f00000000c0)=0x6e) (async) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)=""/110, &(0x7f00000000c0)=0x6e) 08:32:10 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x43c, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfb, {0x4, 0x0, 0x4, [0x8, 0x800, 0x52f2b916, 0x81, 0x7f, 0x5, 0x9, 0xffffff80, 0x4, 0x7f, 0x3, 0xfffff000, 0x5, 0x3ff, 0x5, 0xffffffff, 0xee9, 0x6, 0x0, 0x8, 0xffff0271, 0x8, 0x800, 0x10000, 0x1, 0x7, 0x8, 0x0, 0xf0, 0x0, 0x800, 0x80, 0x80000000, 0x40, 0x39c8, 0x7, 0x1086120d, 0xfffffffa, 0x0, 0x2, 0x2000, 0xfffffc01, 0x80, 0x400, 0x5, 0x8, 0x8, 0x5, 0x3, 0x1, 0xffffff57, 0xf5d, 0x4, 0x2, 0x544, 0x5, 0x200, 0x1, 0x54, 0x6, 0x0, 0x3, 0x1f, 0x2], [0x80, 0xff, 0x51, 0x0, 0x5, 0x7, 0xed3, 0x7fff, 0x3, 0x7, 0x55, 0x8, 0x9, 0x956b, 0x3, 0x2, 0x9, 0x0, 0xfdf, 0x600, 0x6, 0xd778, 0x7f, 0x2, 0x4, 0x0, 0x9, 0x0, 0x94a, 0x7, 0x3f, 0xcbd, 0x8001, 0x1, 0x6, 0x3b19, 0x10000, 0x3, 0x8, 0x3, 0x401, 0xd77, 0x80000000, 0x7f, 0x7, 0x4, 0x2, 0x590, 0xfffffffe, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x7, 0x0, 0x10001, 0x494, 0xb8, 0x7fff, 0x8001, 0x400, 0x3, 0xfff], [0x0, 0x400, 0x80000000, 0x1, 0x2, 0x3, 0x1, 0x2, 0x5e8d, 0x8000, 0x0, 0x1, 0x1, 0x6, 0xff, 0x81, 0x2f22be70, 0x6a, 0x80000001, 0xfffffffa, 0x8001, 0xfffffc00, 0xfff, 0x1f, 0x7, 0x14, 0x5, 0x4, 0x7fff, 0x3, 0x4, 0x1d3, 0xffff8000, 0xcda7, 0x848, 0x1, 0x800, 0x8, 0xff, 0x2, 0x5, 0x7fffffff, 0x6, 0xffff76fb, 0x9, 0x400, 0x7fff, 0x9, 0xb02d, 0x200, 0x4, 0x1, 0x401, 0xffff, 0xfffffff7, 0x7fffffff, 0x10000, 0x4, 0x8000, 0x2, 0xfffffffc, 0x3, 0x0, 0x7], [0xfffffffa, 0x10000, 0x1f, 0xcb4c, 0x59a74c7d, 0x8, 0x401, 0x2, 0x3, 0x101, 0x2, 0x2dc8b93, 0x8, 0x5, 0x1, 0x1f, 0xffffffff, 0x0, 0x4, 0x1, 0x1f, 0x2, 0xffffffff, 0x100, 0x2, 0x0, 0xaa, 0x7c1675ae, 0x7f, 0x401, 0x80, 0x10000, 0x5, 0x10001, 0x9, 0x8, 0x1, 0x8001, 0x9, 0x9, 0x1, 0x1ff, 0x10001, 0x2, 0x20, 0x1f, 0xfffffff7, 0xffffffff, 0x8001, 0xce1, 0x6, 0x1, 0x2, 0x0, 0x7f, 0x9, 0x1, 0x7f, 0x200, 0x2eeb, 0x1000, 0x47e1678d, 0x1ff, 0x6], 0x19, ['&-\x00', '\x93T&\x00', '\x00', '^\x00', '\x00', '#):!\\})%%\xb9#\x00', '}\x00']}, ["", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000010}, 0x28004004) 08:32:10 executing program 3: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 08:32:10 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) syz_io_uring_setup(0x73ac, &(0x7f0000000040)={0x0, 0x86dc, 0x200, 0x1, 0x170}, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_setup(0x2b96, &(0x7f0000000140)={0x0, 0x2d8d, 0x800, 0x0, 0x2ce}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f00000001c0), &(0x7f0000000200)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)="692be6f7fed9dd53d6f2720e2ebc3f370b96a67da20a3b590c5d0ab5594a018124db36e5c1a4bd8dba75870638ed7cecac44f8beeb975431b3ac37ca98d626bafbac2c4637a377fb3a9c43cc1b9b5f6f8ea67c9fb4deaa66aac5f12376f976bdf67754adb35bba02a41c4cf2b6cef8e839b60885db8612ab9743a6e82b2b4212c6a0a504556748a325839ae6e397f485d01f66009abd9149840a98", 0xffffff80, 0x0, 0x0, {0x1}}, 0x8) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) mmap$IORING_OFF_SQES(&(0x7f0000ff3000/0xc000)=nil, 0xc000, 0x3000000, 0x20010, r2, 0x10000000) read$FUSE(r2, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) socketpair(0x1d, 0x1, 0x3f, &(0x7f0000000340)={0xffffffffffffffff}) kcmp$KCMP_EPOLL_TFD(r3, 0x0, 0x7, r4, &(0x7f0000000380)={r5, r6, 0xcb}) 08:32:10 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_dccp_buf(r0, 0x21, 0x80, &(0x7f0000000040)=""/110, &(0x7f00000000c0)=0x6e) 08:32:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x40000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0xfffff000, 0x4000}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="168f6ef8fd15"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x24000090) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@generic={0x25, "77ee6b4f7a2c61d1876d7360b3271e88b4783ba7b70c3b5f21a6a8ccfd10afee6b5da03921936e946d0000ba0bcdc320b853616f01d27f64fc04c35b04096e3984bfc3b08afdd4fd7fae18a35177d8308ed2c9a6f150834b3968a4b3dac354fdf0174172e67a9fcb4af4ebb25777d3138f42aa24f4834726a4cd28eeccdb"}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000000280), 0x40}, 0xa0) 08:32:10 executing program 4: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000500)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000040)={0x43c, 0x3f4, 0x300, 0x70bd2b, 0x25dfdbfb, {0x4, 0x0, 0x4, [0x8, 0x800, 0x52f2b916, 0x81, 0x7f, 0x5, 0x9, 0xffffff80, 0x4, 0x7f, 0x3, 0xfffff000, 0x5, 0x3ff, 0x5, 0xffffffff, 0xee9, 0x6, 0x0, 0x8, 0xffff0271, 0x8, 0x800, 0x10000, 0x1, 0x7, 0x8, 0x0, 0xf0, 0x0, 0x800, 0x80, 0x80000000, 0x40, 0x39c8, 0x7, 0x1086120d, 0xfffffffa, 0x0, 0x2, 0x2000, 0xfffffc01, 0x80, 0x400, 0x5, 0x8, 0x8, 0x5, 0x3, 0x1, 0xffffff57, 0xf5d, 0x4, 0x2, 0x544, 0x5, 0x200, 0x1, 0x54, 0x6, 0x0, 0x3, 0x1f, 0x2], [0x80, 0xff, 0x51, 0x0, 0x5, 0x7, 0xed3, 0x7fff, 0x3, 0x7, 0x55, 0x8, 0x9, 0x956b, 0x3, 0x2, 0x9, 0x0, 0xfdf, 0x600, 0x6, 0xd778, 0x7f, 0x2, 0x4, 0x0, 0x9, 0x0, 0x94a, 0x7, 0x3f, 0xcbd, 0x8001, 0x1, 0x6, 0x3b19, 0x10000, 0x3, 0x8, 0x3, 0x401, 0xd77, 0x80000000, 0x7f, 0x7, 0x4, 0x2, 0x590, 0xfffffffe, 0x8001, 0x800, 0x1, 0x5, 0x9, 0x7, 0x0, 0x10001, 0x494, 0xb8, 0x7fff, 0x8001, 0x400, 0x3, 0xfff], [0x0, 0x400, 0x80000000, 0x1, 0x2, 0x3, 0x1, 0x2, 0x5e8d, 0x8000, 0x0, 0x1, 0x1, 0x6, 0xff, 0x81, 0x2f22be70, 0x6a, 0x80000001, 0xfffffffa, 0x8001, 0xfffffc00, 0xfff, 0x1f, 0x7, 0x14, 0x5, 0x4, 0x7fff, 0x3, 0x4, 0x1d3, 0xffff8000, 0xcda7, 0x848, 0x1, 0x800, 0x8, 0xff, 0x2, 0x5, 0x7fffffff, 0x6, 0xffff76fb, 0x9, 0x400, 0x7fff, 0x9, 0xb02d, 0x200, 0x4, 0x1, 0x401, 0xffff, 0xfffffff7, 0x7fffffff, 0x10000, 0x4, 0x8000, 0x2, 0xfffffffc, 0x3, 0x0, 0x7], [0xfffffffa, 0x10000, 0x1f, 0xcb4c, 0x59a74c7d, 0x8, 0x401, 0x2, 0x3, 0x101, 0x2, 0x2dc8b93, 0x8, 0x5, 0x1, 0x1f, 0xffffffff, 0x0, 0x4, 0x1, 0x1f, 0x2, 0xffffffff, 0x100, 0x2, 0x0, 0xaa, 0x7c1675ae, 0x7f, 0x401, 0x80, 0x10000, 0x5, 0x10001, 0x9, 0x8, 0x1, 0x8001, 0x9, 0x9, 0x1, 0x1ff, 0x10001, 0x2, 0x20, 0x1f, 0xfffffff7, 0xffffffff, 0x8001, 0xce1, 0x6, 0x1, 0x2, 0x0, 0x7f, 0x9, 0x1, 0x7f, 0x200, 0x2eeb, 0x1000, 0x47e1678d, 0x1ff, 0x6], 0x19, ['&-\x00', '\x93T&\x00', '\x00', '^\x00', '\x00', '#):!\\})%%\xb9#\x00', '}\x00']}, ["", ""]}, 0x43c}, 0x1, 0x0, 0x0, 0x20000010}, 0x28004004) 08:32:10 executing program 0: socketpair(0xa, 0x5, 0x400, &(0x7f0000000000)) 08:32:10 executing program 4: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x80000}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001) socket$inet_sctp(0x2, 0x1, 0x84) 08:32:10 executing program 5: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x59}, 0x800) 08:32:10 executing program 1: socketpair(0x2, 0x0, 0xf3, &(0x7f0000000000)) 08:32:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x40000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0xfffff000, 0x4000}) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="168f6ef8fd15"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x24000090) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@generic={0x25, "77ee6b4f7a2c61d1876d7360b3271e88b4783ba7b70c3b5f21a6a8ccfd10afee6b5da03921936e946d0000ba0bcdc320b853616f01d27f64fc04c35b04096e3984bfc3b08afdd4fd7fae18a35177d8308ed2c9a6f150834b3968a4b3dac354fdf0174172e67a9fcb4af4ebb25777d3138f42aa24f4834726a4cd28eeccdb"}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000000280), 0x40}, 0xa0) 08:32:10 executing program 3: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 08:32:10 executing program 0: socketpair(0xa, 0x5, 0x400, &(0x7f0000000000)) 08:32:10 executing program 4: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x80000}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x80000}) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) 08:32:10 executing program 5: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x59}, 0x800) 08:32:10 executing program 0: socketpair(0xa, 0x5, 0x400, &(0x7f0000000000)) 08:32:10 executing program 5: getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x59}, 0x800) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x4}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r0}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xfd}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x59}, 0x800) (async) 08:32:10 executing program 4: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x80000}) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001) socket$inet_sctp(0x2, 0x1, 0x84) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000000)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x7, 0xffffffffffffffff, 0x80000}) (async) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8000000000000001) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) 08:32:10 executing program 2: ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x40000000}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0xfffff000, 0x4000}) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="168f6ef8fd15"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x24000090) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@generic={0x25, "77ee6b4f7a2c61d1876d7360b3271e88b4783ba7b70c3b5f21a6a8ccfd10afee6b5da03921936e946d0000ba0bcdc320b853616f01d27f64fc04c35b04096e3984bfc3b08afdd4fd7fae18a35177d8308ed2c9a6f150834b3968a4b3dac354fdf0174172e67a9fcb4af4ebb25777d3138f42aa24f4834726a4cd28eeccdb"}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000000280), 0x40}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0x40000000}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x101}}, './file0\x00'}) (async) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000040)={r1, 0x1, 0xfffff000, 0x4000}) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x3}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="168f6ef8fd15"}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x8001}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040}, 0x24000090) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_GET_MR_FOR_DEST(r4, 0x114, 0x7, &(0x7f00000002c0)={@generic={0x25, "77ee6b4f7a2c61d1876d7360b3271e88b4783ba7b70c3b5f21a6a8ccfd10afee6b5da03921936e946d0000ba0bcdc320b853616f01d27f64fc04c35b04096e3984bfc3b08afdd4fd7fae18a35177d8308ed2c9a6f150834b3968a4b3dac354fdf0174172e67a9fcb4af4ebb25777d3138f42aa24f4834726a4cd28eeccdb"}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000000280), 0x40}, 0xa0) (async) 08:32:10 executing program 3: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 08:32:10 executing program 0: ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000000)) socketpair(0x1a, 0x80000, 0x3fb, &(0x7f0000000040)) 08:32:10 executing program 1: socketpair(0x2, 0xa, 0x0, &(0x7f0000000000)) 08:32:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 08:32:10 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 08:32:10 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) socketpair(0x1f, 0x1, 0x3b98, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', r1, 0x1, 0x8, 0x10001, 0x4, {{0x2e, 0x4, 0x1, 0x39, 0xb8, 0x65, 0x0, 0x1e, 0x0, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0x4, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6}, {@local, 0x1}, {@multicast1, 0x3f}, {@loopback, 0xaa3}, {@rand_addr=0x81, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x4e, 0x3, 0x0, [{@private=0xa010102, 0x80000001}, {@loopback, 0x3}, {@local, 0x969}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x3c, 0x3, 0x1, [{@remote, 0x40}, {@empty, 0x80000001}, {@rand_addr=0x64010102, 0x80}, {@remote, 0x80000}]}, @lsrr={0x83, 0x7, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x7, [{@multicast1, 0x9}, {@private=0xa010100, 0x1f}]}, @end]}}}}}) 08:32:10 executing program 0: ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000000)) (async) socketpair(0x1a, 0x80000, 0x3fb, &(0x7f0000000040)) 08:32:10 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) socketpair(0x1f, 0x1, 0x3b98, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', r1, 0x1, 0x8, 0x10001, 0x4, {{0x2e, 0x4, 0x1, 0x39, 0xb8, 0x65, 0x0, 0x1e, 0x0, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0x4, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6}, {@local, 0x1}, {@multicast1, 0x3f}, {@loopback, 0xaa3}, {@rand_addr=0x81, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x4e, 0x3, 0x0, [{@private=0xa010102, 0x80000001}, {@loopback, 0x3}, {@local, 0x969}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x3c, 0x3, 0x1, [{@remote, 0x40}, {@empty, 0x80000001}, {@rand_addr=0x64010102, 0x80}, {@remote, 0x80000}]}, @lsrr={0x83, 0x7, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x7, [{@multicast1, 0x9}, {@private=0xa010100, 0x1f}]}, @end]}}}}}) 08:32:10 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 08:32:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 08:32:11 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 1: socketpair(0x2, 0xa, 0x0, 0x0) 08:32:11 executing program 0: ioctl$FUSE_DEV_IOC_CLONE(0xffffffffffffffff, 0x8004e500, &(0x7f0000000000)) (async) socketpair(0x1a, 0x80000, 0x3fb, &(0x7f0000000040)) 08:32:11 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x1f, 0x1, 0x3b98, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000080)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000140)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000380)={'syztnl1\x00', r1, 0x1, 0x8, 0x10001, 0x4, {{0x2e, 0x4, 0x1, 0x39, 0xb8, 0x65, 0x0, 0x1e, 0x0, 0x0, @multicast2, @multicast2, {[@timestamp_prespec={0x44, 0x3c, 0x93, 0x3, 0x4, [{@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x6}, {@local, 0x1}, {@multicast1, 0x3f}, {@loopback, 0xaa3}, {@rand_addr=0x81, 0xfffffffe}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}]}, @timestamp_prespec={0x44, 0x24, 0x4e, 0x3, 0x0, [{@private=0xa010102, 0x80000001}, {@loopback, 0x3}, {@local, 0x969}, {@empty, 0x7}]}, @timestamp_prespec={0x44, 0x24, 0x3c, 0x3, 0x1, [{@remote, 0x40}, {@empty, 0x80000001}, {@rand_addr=0x64010102, 0x80}, {@remote, 0x80000}]}, @lsrr={0x83, 0x7, 0xd8, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @ra={0x94, 0x4}, @timestamp_prespec={0x44, 0x14, 0x24, 0x3, 0x7, [{@multicast1, 0x9}, {@private=0xa010100, 0x1f}]}, @end]}}}}}) 08:32:11 executing program 4: r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) 08:32:11 executing program 5: read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) 08:32:11 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) 08:32:11 executing program 1: socketpair(0x2, 0xa, 0x0, 0x0) 08:32:11 executing program 5: socketpair(0x10, 0x3, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x40, 0x8, 0x8, {{0x14, 0x4, 0x0, 0xb, 0x50, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x3a, 0x3, 0x5, [{@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x53e}, {@rand_addr=0x64010100, 0x8}]}, @rr={0x7, 0x7, 0x50, [@multicast2]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @multicast1]}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xa, [0x6]}, @end]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000) 08:32:11 executing program 4: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 1: socketpair(0x2, 0xa, 0x0, 0x0) 08:32:11 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) 08:32:11 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:11 executing program 3: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 4: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 5: socketpair(0x10, 0x3, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x40, 0x8, 0x8, {{0x14, 0x4, 0x0, 0xb, 0x50, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x3a, 0x3, 0x5, [{@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x53e}, {@rand_addr=0x64010100, 0x8}]}, @rr={0x7, 0x7, 0x50, [@multicast2]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @multicast1]}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xa, [0x6]}, @end]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000) 08:32:11 executing program 1: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) 08:32:11 executing program 3: socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) 08:32:11 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) 08:32:11 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000040), 0x4) (async) 08:32:11 executing program 5: socketpair(0x10, 0x3, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000140)={'syztnl1\x00', &(0x7f00000000c0)={'sit0\x00', 0x0, 0x1, 0x40, 0x8, 0x8, {{0x14, 0x4, 0x0, 0xb, 0x50, 0x66, 0x0, 0x1, 0x29, 0x0, @multicast2, @empty, {[@timestamp_prespec={0x44, 0x1c, 0x3a, 0x3, 0x5, [{@rand_addr=0x64010102, 0x5}, {@dev={0xac, 0x14, 0x14, 0x11}, 0x53e}, {@rand_addr=0x64010100, 0x8}]}, @rr={0x7, 0x7, 0x50, [@multicast2]}, @rr={0x7, 0xf, 0x6, [@loopback, @remote, @multicast1]}, @timestamp={0x44, 0x8, 0xc2, 0x0, 0xa, [0x6]}, @end]}}}}}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000022}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x40, r2, 0x8, 0x70bd29, 0x25dfdbfb, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xe40}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x40}, 0x1, 0x0, 0x0, 0x804}, 0x8000) 08:32:11 executing program 4: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 1: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) 08:32:11 executing program 3: socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) 08:32:11 executing program 0: socketpair(0x27, 0xa, 0x400, &(0x7f0000000000)) 08:32:11 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:11 executing program 5: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 08:32:11 executing program 4: socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 1: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)=ANY=[@ANYBLOB="0100"/12, @ANYRES32=r0, @ANYBLOB="58d00000000000002e2f66696c653000"]) 08:32:11 executing program 0: socketpair(0x27, 0xa, 0x400, &(0x7f0000000000)) socketpair(0x27, 0xa, 0x400, &(0x7f0000000000)) (async) 08:32:11 executing program 3: socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) 08:32:11 executing program 5: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 08:32:11 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x7, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 08:32:11 executing program 1: socketpair(0x21, 0x2, 0x2, &(0x7f0000000000)) 08:32:11 executing program 0: socketpair(0x27, 0xa, 0x400, &(0x7f0000000000)) socketpair(0x27, 0xa, 0x400, &(0x7f0000000000)) (async) 08:32:11 executing program 3: socketpair(0x21, 0x2, 0x2, 0x0) 08:32:11 executing program 5: socketpair(0x10, 0x2, 0x0, &(0x7f0000000000)) 08:32:11 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x7, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) (async) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x7, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 08:32:11 executing program 1: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 08:32:11 executing program 3: socketpair(0x21, 0x2, 0x2, 0x0) 08:32:11 executing program 4: socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) 08:32:11 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:32:11 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r1, 0x10, 0x7, 0x25dfdbfc, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) 08:32:11 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 08:32:12 executing program 3: socketpair(0x21, 0x2, 0x2, 0x0) 08:32:12 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) 08:32:12 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$rds(r0, &(0x7f0000003980)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/50, 0x32}], 0x2, &(0x7f0000003840)=[@rdma_args={0x48, 0x114, 0x1, {{0x400, 0x7f}, {&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000003680)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/167, 0xa7}, {&(0x7f0000003280)=""/13, 0xd}, {&(0x7f00000032c0)=""/231, 0xe7}, {&(0x7f00000033c0)=""/85, 0x55}, {&(0x7f0000003440)=""/226, 0xe2}, {&(0x7f0000003540)=""/182, 0xb6}, {&(0x7f0000003600)=""/124, 0x7c}], 0x9, 0x53, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x7ff}, &(0x7f0000003740)=0x7, &(0x7f0000003780)=0x80, 0x8000000000000000, 0x80000000, 0x28de937a00000, 0x7fffffff, 0x0, 0x40}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0xfff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x2}, &(0x7f00000037c0)=0x5, &(0x7f0000003800)=0xb7d, 0x10001, 0x3, 0xfffffffffffffffa, 0x7, 0x20, 0x5}}], 0x110, 0x40}, 0x4000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000039c0)=@base={0x4, 0x0, 0x7ff, 0xfffffffc, 0x600, r0, 0x46, '\x00', 0x0, r1, 0x3, 0x5, 0x2}, 0x48) 08:32:12 executing program 1: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 08:32:12 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 08:32:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 08:32:12 executing program 4: socketpair(0x0, 0x0, 0x2, &(0x7f0000000000)) 08:32:12 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) 08:32:12 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$rds(r0, &(0x7f0000003980)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/50, 0x32}], 0x2, &(0x7f0000003840)=[@rdma_args={0x48, 0x114, 0x1, {{0x400, 0x7f}, {&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000003680)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/167, 0xa7}, {&(0x7f0000003280)=""/13, 0xd}, {&(0x7f00000032c0)=""/231, 0xe7}, {&(0x7f00000033c0)=""/85, 0x55}, {&(0x7f0000003440)=""/226, 0xe2}, {&(0x7f0000003540)=""/182, 0xb6}, {&(0x7f0000003600)=""/124, 0x7c}], 0x9, 0x53, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x7ff}, &(0x7f0000003740)=0x7, &(0x7f0000003780)=0x80, 0x8000000000000000, 0x80000000, 0x28de937a00000, 0x7fffffff, 0x0, 0x40}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0xfff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x2}, &(0x7f00000037c0)=0x5, &(0x7f0000003800)=0xb7d, 0x10001, 0x3, 0xfffffffffffffffa, 0x7, 0x20, 0x5}}], 0x110, 0x40}, 0x4000) (async) sendmsg$rds(r0, &(0x7f0000003980)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/50, 0x32}], 0x2, &(0x7f0000003840)=[@rdma_args={0x48, 0x114, 0x1, {{0x400, 0x7f}, {&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000003680)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/167, 0xa7}, {&(0x7f0000003280)=""/13, 0xd}, {&(0x7f00000032c0)=""/231, 0xe7}, {&(0x7f00000033c0)=""/85, 0x55}, {&(0x7f0000003440)=""/226, 0xe2}, {&(0x7f0000003540)=""/182, 0xb6}, {&(0x7f0000003600)=""/124, 0x7c}], 0x9, 0x53, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x7ff}, &(0x7f0000003740)=0x7, &(0x7f0000003780)=0x80, 0x8000000000000000, 0x80000000, 0x28de937a00000, 0x7fffffff, 0x0, 0x40}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0xfff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x2}, &(0x7f00000037c0)=0x5, &(0x7f0000003800)=0xb7d, 0x10001, 0x3, 0xfffffffffffffffa, 0x7, 0x20, 0x5}}], 0x110, 0x40}, 0x4000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000039c0)=@base={0x4, 0x0, 0x7ff, 0xfffffffc, 0x600, r0, 0x46, '\x00', 0x0, r1, 0x3, 0x5, 0x2}, 0x48) 08:32:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 08:32:12 executing program 0: socketpair(0x1a, 0x0, 0x400, &(0x7f0000000000)) 08:32:12 executing program 5: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) (async) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) (async) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 08:32:12 executing program 1: socketpair(0x0, 0x2, 0x2, &(0x7f0000000000)) 08:32:12 executing program 4: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) 08:32:12 executing program 0: socketpair(0x1a, 0x0, 0x400, &(0x7f0000000000)) 08:32:12 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$rds(r0, &(0x7f0000003980)={&(0x7f0000000040)={0x2, 0x4e21, @broadcast}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000080)=""/187, 0xbb}, {&(0x7f0000000140)=""/50, 0x32}], 0x2, &(0x7f0000003840)=[@rdma_args={0x48, 0x114, 0x1, {{0x400, 0x7f}, {&(0x7f00000001c0)=""/4096, 0x1000}, &(0x7f0000003680)=[{&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/4096, 0x1000}, {&(0x7f00000031c0)=""/167, 0xa7}, {&(0x7f0000003280)=""/13, 0xd}, {&(0x7f00000032c0)=""/231, 0xe7}, {&(0x7f00000033c0)=""/85, 0x55}, {&(0x7f0000003440)=""/226, 0xe2}, {&(0x7f0000003540)=""/182, 0xb6}, {&(0x7f0000003600)=""/124, 0x7c}], 0x9, 0x53, 0x8}}, @mask_cswp={0x58, 0x114, 0x9, {{0x1000, 0x7ff}, &(0x7f0000003740)=0x7, &(0x7f0000003780)=0x80, 0x8000000000000000, 0x80000000, 0x28de937a00000, 0x7fffffff, 0x0, 0x40}}, @rdma_dest={0x18, 0x114, 0x2, {0x2, 0xfff}}, @mask_fadd={0x58, 0x114, 0x8, {{0x8, 0x2}, &(0x7f00000037c0)=0x5, &(0x7f0000003800)=0xb7d, 0x10001, 0x3, 0xfffffffffffffffa, 0x7, 0x20, 0x5}}], 0x110, 0x40}, 0x4000) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f00000039c0)=@base={0x4, 0x0, 0x7ff, 0xfffffffc, 0x600, r0, 0x46, '\x00', 0x0, r1, 0x3, 0x5, 0x2}, 0x48) 08:32:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 08:32:12 executing program 4: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) 08:32:12 executing program 5: socketpair(0xa, 0x5, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYBLOB="2e2f03696c6530edd92e2e000000002ce18313eb063ad7959a"]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000200)={0x4, 0x5, &(0x7f0000000040)=[0x100, 0x50f, 0x1000, 0x2, 0x6], &(0x7f0000000080), &(0x7f00000000c0)=[0x1, 0x7, 0x6], &(0x7f0000000100)=[0x7ff, 0xfff, 0x101, 0x9]}) 08:32:12 executing program 0: socketpair(0x1a, 0x0, 0x400, &(0x7f0000000000)) socketpair(0x1a, 0x0, 0x400, &(0x7f0000000000)) (async) 08:32:12 executing program 2: socketpair(0x2b, 0xe, 0xfffffffe, &(0x7f0000000000)) 08:32:12 executing program 4: socketpair(0x21, 0x0, 0x0, &(0x7f0000000000)) 08:32:12 executing program 0: socketpair(0x2a, 0x0, 0x3, &(0x7f0000000040)) epoll_create1(0x80000) 08:32:12 executing program 1: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 08:32:12 executing program 5: socketpair(0xa, 0x5, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYBLOB="2e2f03696c6530edd92e2e000000002ce18313eb063ad7959a"]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000200)={0x4, 0x5, &(0x7f0000000040)=[0x100, 0x50f, 0x1000, 0x2, 0x6], &(0x7f0000000080), &(0x7f00000000c0)=[0x1, 0x7, 0x6], &(0x7f0000000100)=[0x7ff, 0xfff, 0x101, 0x9]}) socketpair(0xa, 0x5, 0x1ff, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYBLOB="2e2f03696c6530edd92e2e000000002ce18313eb063ad7959a"]) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) (async) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000200)={0x4, 0x5, &(0x7f0000000040)=[0x100, 0x50f, 0x1000, 0x2, 0x6], &(0x7f0000000080), &(0x7f00000000c0)=[0x1, 0x7, 0x6], &(0x7f0000000100)=[0x7ff, 0xfff, 0x101, 0x9]}) (async) 08:32:12 executing program 2: socketpair(0x2b, 0xe, 0xfffffffe, &(0x7f0000000000)) 08:32:12 executing program 4: socketpair(0x21, 0x0, 0x2, 0x0) 08:32:12 executing program 0: socketpair(0x2a, 0x0, 0x3, &(0x7f0000000040)) (async) epoll_create1(0x80000) 08:32:12 executing program 1: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) 08:32:12 executing program 2: socketpair(0x2b, 0xe, 0xfffffffe, &(0x7f0000000000)) socketpair(0x2b, 0xe, 0xfffffffe, &(0x7f0000000000)) (async) 08:32:12 executing program 5: socketpair(0xa, 0x5, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, 0xffffffffffffffff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r2, @ANYRES32, @ANYBLOB="2e2f03696c6530edd92e2e000000002ce18313eb063ad7959a"]) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r4, 0xc0189373, &(0x7f0000000080)={{0x1, 0x1, 0x18, r3, {0x5}}, './file0\x00'}) ioctl$FBIOPUTCMAP(0xffffffffffffffff, 0x4605, &(0x7f0000000200)={0x4, 0x5, &(0x7f0000000040)=[0x100, 0x50f, 0x1000, 0x2, 0x6], &(0x7f0000000080), &(0x7f00000000c0)=[0x1, 0x7, 0x6], &(0x7f0000000100)=[0x7ff, 0xfff, 0x101, 0x9]}) 08:32:12 executing program 0: socketpair(0x2a, 0x0, 0x3, &(0x7f0000000040)) epoll_create1(0x80000) 08:32:12 executing program 4: socketpair(0x21, 0x0, 0x2, 0x0) 08:32:12 executing program 1: socketpair(0x21, 0x0, 0x2, &(0x7f0000000000)) 08:32:12 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8001}, 0x8) socketpair(0x10, 0x800, 0x0, &(0x7f0000000080)) 08:32:12 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) 08:32:12 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040884}, 0x1) 08:32:12 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0700008080000000002100014607001c00670000072f9078ac1414aa0000000094040000"]}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:13 executing program 4: socketpair(0x21, 0x0, 0x2, 0x0) 08:32:13 executing program 1: socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) 08:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 08:32:13 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8001}, 0x8) (async) socketpair(0x10, 0x800, 0x0, &(0x7f0000000080)) 08:32:13 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040884}, 0x1) 08:32:13 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0700008080000000002100014607001c00670000072f9078ac1414aa0000000094040000"]}) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 08:32:13 executing program 1: socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) 08:32:13 executing program 5: bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000040)={0x8001}, 0x8) (async, rerun: 64) socketpair(0x10, 0x800, 0x0, &(0x7f0000000080)) (rerun: 64) 08:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) 08:32:13 executing program 1: socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)) 08:32:13 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x2, 0x70bd29, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x4040884}, 0x1) 08:32:13 executing program 4: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r6, 0xc0189374, &(0x7f0000002480)={{0x1, 0x1, 0x18, r3}, './file1\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r12, 0xc0189375, &(0x7f0000002ac0)={{0x1, 0x1, 0x18}, './file2\x00'}) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x6, 0x1}) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r13, 0x8933, &(0x7f0000002140)={'batadv_slave_0\x00'}) 08:32:13 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0700008080000000002100014607001c00670000072f9078ac1414aa0000000094040000"]}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0xa, &(0x7f0000000080)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}], 0x28, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000380)={'tunl0\x00', &(0x7f0000000340)=ANY=[@ANYBLOB='syztnl0\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r1, @ANYBLOB="0700008080000000002100014607001c00670000072f9078ac1414aa0000000094040000"]}) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) 08:32:13 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1000100000000, r0, 0x80000}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) 08:32:13 executing program 1: socketpair(0x21, 0x2, 0x2, 0x0) 08:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000025c0)={r11, 0xe0, &(0x7f00000024c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000022c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000002300)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002340)=[0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000002380), 0x0, 0x10, &(0x7f0000002400), &(0x7f0000002440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000002380)}}, 0x10) 08:32:13 executing program 5: socketpair(0x9, 0x1, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001080)={@vsock={0x28, 0x0, 0xffffffff}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x8}, 0xa0) 08:32:13 executing program 0: socketpair(0x9, 0x4, 0xc764, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x48854) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x10000000}) 08:32:13 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000ec8752fff88fcfab", @ANYRES32=r1, @ANYBLOB="ff010000000000002e2f66696c653000"]) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f0000000100)={0x4, r0, 0x1}) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), r0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x34, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r10, 0xc0189374, &(0x7f00000023c0)={{0x1, 0x1, 0x18, r10, {0x6}}, './file0\x00'}) 08:32:13 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1000100000000, r0, 0x80000}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) 08:32:13 executing program 1: socketpair(0x21, 0x2, 0x2, 0x0) 08:32:13 executing program 5: socketpair(0x9, 0x1, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001080)={@vsock={0x28, 0x0, 0xffffffff}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x8}, 0xa0) 08:32:13 executing program 0: socketpair(0x9, 0x4, 0xc764, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x48854) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x10000000}) socketpair(0x9, 0x4, 0xc764, &(0x7f0000000200)) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x48854) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x10000000}) (async) 08:32:13 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="01800000008000002e2f66696c653000f8b3724b19c9a160b70ce3b3cc866f363cef8880a0162a9f384c5292533f160bc521eff971249f98eab99a85e2d4ef108104bcf9948a5b192d6c0460e71f2e9839e73137b4bdd55ddb96da65f742fc13c68b65068f4338c962310e617b83a94904d04b1549a2e32ac8762c3216eeeea894fb086dc403f830711e74b9051e94c80dffa2084a52810cca8f3d50016efbd2e999c469e0f5ce56d0a62d6c7d0e2b8afc94320d70fa831dc408218a32c5227fae21e503d6010f6bf65606c59a96da04ce3f728b3a271769c07c33b8e506dfeae824bba0bc58ec8ce1dd03bda630818ecbb662af1aa8b9cd4cec4ea95f3a"]) 08:32:13 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1000100000000, r0, 0x80000}) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000040)={0x1000100000000, r0, 0x80000}) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r1, 0x12, 0x2, &(0x7f0000000080)=""/4096, &(0x7f0000001080)=0x1000) (async) 08:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r9, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r8, 0xc0189379, &(0x7f0000002280)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) 08:32:13 executing program 1: socketpair(0x21, 0x2, 0x2, 0x0) 08:32:13 executing program 5: socketpair(0x9, 0x1, 0x8001, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000001080)={@vsock={0x28, 0x0, 0xffffffff}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x8}, 0xa0) 08:32:13 executing program 0: socketpair(0x9, 0x4, 0xc764, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x48854) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) (async) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000080)={0x10000000}) 08:32:13 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"]) 08:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000002600)={0x130, 0x0, r8, [{0x1, 0x8, 0xa5, 0x0, ':\xa0\x17\\\'\xc8\xd6\xcf\xc6\xb8\xa1\xb8\xf0FK\xc5c\xfa\b\xc7\xe2I\xe8U\x84\"\xb6\xa8\x8dCs\"\x1au\xecB%zG\xcbSC\x10U\xdd\x01\x8d\f\x9c\x01\x17\r\xeb9}fk\x1b\x04\x9f-\xf8^\xe4\xbfq\x17\x01\x02\xee\x11>UBe?\xd4c\x17\xef63X\xce\x84ZGj\xcd\x14\x9a\xc3\v\xf52\xc1p\xaa\xcb\x17\x17p\x84\xed0z\xf5\x04\xc5\xa1\xe6cGn\x85\xb6\x87_\x12\xce\b\x04 \xc1\x84\xba\x19E\xcciT1\xe6\x9a\xfea\x9c\x02\f/\x83\f\xa7\x87\xc0\x9d\xce[D\xbb\xdc\xb4\xe2\xbe5\x00'/165}, {0x4, 0x8, 0x1, 0x4, '}'}, {0x5, 0x4, 0x2, 0x5, '-)'}, {0x1, 0x6, 0x6, 0x40, '-^(\xbe#}'}]}, 0x130) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:13 executing program 2: socketpair(0x0, 0x1, 0x1, &(0x7f0000000000)) 08:32:13 executing program 1: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3e, 0x2}) socketpair(0x21, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x200}}, './file1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) read$msr(r2, &(0x7f00000007c0)=""/4096, 0x1000) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)={{0x1, 0x1, 0xfffffffffffffd2e, r1}, './file0\x00'}) 08:32:13 executing program 5: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040), 0x1) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 08:32:13 executing program 0: bpf$MAP_CREATE(0x3, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000012) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)={r3}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, {&(0x7f0000000200)=""/180, 0xb4}, &(0x7f0000000080), 0x36}, 0xa0) 08:32:13 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000100)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="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"]) 08:32:13 executing program 1: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x3f}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r1, {0xffffffff}}, './file0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x6, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9ad}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @map_idx={0x18, 0x9, 0x5, 0x0, 0xa}]}, &(0x7f0000000140)='syzkaller\x00', 0xa6e, 0x1000, &(0x7f00000007c0)=""/4096, 0x40f00, 0x0, '\x00', 0x0, 0x0, r3, 0x8, 0xffffffffffffffff, 0x0, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x5, 0x5}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000240)=[r2, r4, r2]}, 0x80) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000000c0)={'ip_vti0\x00', &(0x7f0000000040)={'gretap0\x00', 0x0, 0x74bebc2be0681b0b, 0x7, 0x6, 0x4816, {{0xe, 0x4, 0x1, 0x7, 0x38, 0x68, 0x0, 0x4f, 0x4, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x14, 0xcc, 0x3, 0x2, [{@multicast1, 0x3}, {@rand_addr=0x64010102, 0x4}]}, @rr={0x7, 0xf, 0xb8, [@rand_addr=0x64010101, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) 08:32:13 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020}, 0x2020) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:13 executing program 5: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040), 0x1) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 08:32:13 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) 08:32:13 executing program 0: bpf$MAP_CREATE(0x3, 0x0, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000012) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)={r3}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, {&(0x7f0000000200)=""/180, 0xb4}, &(0x7f0000000080), 0x36}, 0xa0) 08:32:14 executing program 1: socketpair(0x2c, 0x3, 0x1f, &(0x7f0000000000)) 08:32:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r6, 0xc0189379, &(0x7f0000002240)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r7, @ANYBLOB="00000004000000002e2f66d46c653000"]) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:14 executing program 2: socketpair(0x0, 0x1, 0x1, &(0x7f0000000000)) socketpair(0x0, 0x1, 0x1, &(0x7f0000000000)) (async) 08:32:14 executing program 5: setsockopt$SO_RDS_MSG_RXPATH_LATENCY(0xffffffffffffffff, 0x114, 0xa, &(0x7f0000000040), 0x1) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) 08:32:14 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 08:32:14 executing program 1: socketpair(0x2c, 0x3, 0x1f, &(0x7f0000000000)) 08:32:14 executing program 0: bpf$MAP_CREATE(0x3, 0x0, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000012) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000180)={0x4, 0x0, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0]}) ioctl$DRM_IOCTL_MODE_REVOKE_LEASE(r2, 0xc00464c9, &(0x7f00000001c0)={r3}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000002c0)={@in6={0xa, 0x4e20, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}, 0x80000000}, {&(0x7f0000000200)=""/180, 0xb4}, &(0x7f0000000080), 0x36}, 0xa0) 08:32:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:14 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) 08:32:14 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:14 executing program 1: socketpair(0x2c, 0x3, 0x1f, &(0x7f0000000000)) 08:32:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:14 executing program 0: socketpair(0xb, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:32:14 executing program 2: socketpair(0x0, 0x1, 0x1, &(0x7f0000000000)) 08:32:14 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 08:32:14 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:14 executing program 1: socketpair(0x0, 0x3, 0x1f, &(0x7f0000000000)) 08:32:14 executing program 0: socketpair(0xb, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:32:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:14 executing program 4: socketpair(0x26, 0x5, 0xffffff02, &(0x7f0000000040)) 08:32:14 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair(0x10, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:14 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:32:14 executing program 4: socketpair(0x0, 0x5, 0xffffff02, &(0x7f0000000040)) 08:32:14 executing program 0: socketpair(0xb, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r0, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) 08:32:14 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:32:14 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:14 executing program 1: socketpair(0x0, 0x3, 0x1f, &(0x7f0000000000)) 08:32:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:14 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = getpgid(0x0) syz_open_procfs$userns(r1, &(0x7f0000002040)) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, {{0x5, 0x5, 0x1, r1}}}, 0x28) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x34004044) 08:32:14 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async, rerun: 64) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r0) 08:32:14 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async, rerun: 64) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) (rerun: 64) 08:32:14 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:14 executing program 4: socketpair(0x0, 0x5, 0xffffff02, &(0x7f0000000040)) 08:32:14 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = getpgid(0x0) syz_open_procfs$userns(r1, &(0x7f0000002040)) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, {{0x5, 0x5, 0x1, r1}}}, 0x28) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x34004044) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) (async) getpgid(0x0) (async) syz_open_procfs$userns(r1, &(0x7f0000002040)) (async) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, {{0x5, 0x5, 0x1, r1}}}, 0x28) (async) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x34004044) (async) 08:32:14 executing program 1: socketpair(0x0, 0x3, 0x1f, &(0x7f0000000000)) 08:32:15 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = getpgid(0x0) syz_open_procfs$userns(r1, &(0x7f0000002040)) (async) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, {{0x5, 0x5, 0x1, r1}}}, 0x28) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x34004044) 08:32:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:15 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x56, 0x1, 0x5, 0x6, {0x6, 0x9, 0x6, 0xcb6c, 0xa9b, 0x7, 0x0, 0x3, 0x10000, 0x6000, 0xff, 0xee00, r0, 0x2, 0x101}}, {0x0, 0xf}}}, 0xa0) 08:32:15 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) (async) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) (async) 08:32:15 executing program 0: socketpair(0x5, 0x0, 0x10005, &(0x7f0000000040)) 08:32:15 executing program 4: socketpair(0x0, 0x5, 0xffffff02, &(0x7f0000000040)) 08:32:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32, @ANYBLOB="04000000000000002e2f66696c653000"]) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:15 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x56, 0x1, 0x5, 0x6, {0x6, 0x9, 0x6, 0xcb6c, 0xa9b, 0x7, 0x0, 0x3, 0x10000, 0x6000, 0xff, 0xee00, r0, 0x2, 0x101}}, {0x0, 0xf}}}, 0xa0) 08:32:15 executing program 5: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r1 = getpgid(0x0) syz_open_procfs$userns(r1, &(0x7f0000002040)) write$FUSE_LK(r0, &(0x7f0000000180)={0x28, 0x0, 0x0, {{0x5, 0x5, 0x1, r1}}}, 0x28) sendmsg$AUDIT_TTY_GET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x10, 0x3f8, 0x800, 0x70bd25, 0x25dfdbff, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40040}, 0x34004044) 08:32:15 executing program 1: socketpair(0x2c, 0x0, 0x1f, &(0x7f0000000000)) 08:32:15 executing program 2: bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async, rerun: 32) getresgid(&(0x7f0000000140), &(0x7f0000000180)=0x0, &(0x7f00000001c0)) write$FUSE_CREATE_OPEN(0xffffffffffffffff, &(0x7f0000000080)={0xa0, 0x0, 0x0, {{0x6, 0x3, 0x56, 0x1, 0x5, 0x6, {0x6, 0x9, 0x6, 0xcb6c, 0xa9b, 0x7, 0x0, 0x3, 0x10000, 0x6000, 0xff, 0xee00, r0, 0x2, 0x101}}, {0x0, 0xf}}}, 0xa0) 08:32:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:15 executing program 0: socketpair(0x5, 0x0, 0x10005, &(0x7f0000000040)) 08:32:15 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:15 executing program 4: socketpair(0x26, 0x0, 0xffffff02, &(0x7f0000000040)) 08:32:15 executing program 1: socketpair(0x2c, 0x0, 0x1f, &(0x7f0000000000)) 08:32:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:15 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e20, 0x5dd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, r3}}, 0x38) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:15 executing program 1: socketpair(0x2c, 0x0, 0x1f, &(0x7f0000000000)) 08:32:15 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:15 executing program 4: socketpair(0x26, 0x0, 0xffffff02, &(0x7f0000000040)) 08:32:15 executing program 0: socketpair(0x5, 0x0, 0x10005, &(0x7f0000000040)) 08:32:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:15 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0), 0x2, 0x2}}, 0x20) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e20, 0x5dd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, r3}}, 0x38) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:15 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:15 executing program 4: socketpair(0x26, 0x0, 0xffffff02, &(0x7f0000000040)) 08:32:15 executing program 3: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:15 executing program 5: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:15 executing program 2: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) (async) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e20, 0x5dd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, r3}}, 0x38) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) (async) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:15 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:15 executing program 0: socketpair(0xa, 0x3, 0x401, &(0x7f0000000000)) 08:32:15 executing program 3: clock_gettime(0x5, &(0x7f00000029c0)) 08:32:15 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:15 executing program 4: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 08:32:15 executing program 2: socketpair(0x0, 0xe, 0xffffffff, &(0x7f0000000000)) 08:32:15 executing program 0: socketpair(0xa, 0x3, 0x401, &(0x7f0000000000)) socketpair(0xa, 0x3, 0x401, &(0x7f0000000000)) (async) 08:32:15 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:16 executing program 3: clock_gettime(0x0, &(0x7f00000029c0)) 08:32:16 executing program 5: syz_open_dev$dri(0x0, 0x20, 0x20200) 08:32:16 executing program 4: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 08:32:16 executing program 2: socketpair(0x0, 0xe, 0xffffffff, &(0x7f0000000000)) 08:32:16 executing program 0: socketpair(0xa, 0x3, 0x401, &(0x7f0000000000)) 08:32:16 executing program 1: socketpair(0x2c, 0x3, 0x1f, 0x0) 08:32:16 executing program 5: syz_open_dev$dri(0x0, 0x20, 0x20200) 08:32:16 executing program 3: clock_gettime(0x0, &(0x7f00000029c0)) 08:32:16 executing program 4: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 08:32:16 executing program 2: socketpair(0x0, 0xe, 0xffffffff, &(0x7f0000000000)) 08:32:16 executing program 1: socketpair(0x2c, 0x3, 0x1f, 0x0) 08:32:16 executing program 5: syz_open_dev$dri(0x0, 0x20, 0x20200) 08:32:16 executing program 3: clock_gettime(0x0, &(0x7f00000029c0)) 08:32:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x80000010}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:16 executing program 4: socketpair(0x26, 0x5, 0xffffff02, 0x0) 08:32:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20200) 08:32:16 executing program 2: socketpair(0x23, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:32:16 executing program 4: socketpair(0x26, 0x5, 0xffffff02, 0x0) 08:32:16 executing program 3: clock_gettime(0x5, 0x0) 08:32:16 executing program 1: socketpair(0x2c, 0x3, 0x1f, 0x0) 08:32:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20200) 08:32:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (rerun: 32) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x80000010}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:16 executing program 2: socketpair(0x23, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:32:16 executing program 3: clock_gettime(0x5, 0x0) 08:32:16 executing program 4: socketpair(0x26, 0x5, 0xffffff02, 0x0) 08:32:16 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20200) 08:32:16 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f00000003c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000180)=[{}, {}], 0x10, 0x10, &(0x7f00000001c0), &(0x7f0000000200), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000240)}}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000400)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async, rerun: 32) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000040)={0x80000010}) (async, rerun: 32) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (rerun: 32) 08:32:16 executing program 2: socketpair(0x23, 0x4, 0x4, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) socketpair(0x23, 0x4, 0x4, &(0x7f0000000000)) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) (async) getsockopt$inet6_dccp_int(r1, 0x21, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) (async) 08:32:16 executing program 4: socketpair(0x0, 0xe, 0xffffffff, &(0x7f0000000000)) 08:32:16 executing program 3: clock_gettime(0x5, 0x0) 08:32:16 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) 08:32:16 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:16 executing program 3: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 08:32:16 executing program 1: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:16 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) 08:32:16 executing program 3: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 08:32:16 executing program 0: socketpair(0x1a, 0x0, 0x7d, &(0x7f0000000000)) 08:32:16 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:16 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:16 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 08:32:16 executing program 5: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) 08:32:16 executing program 0: socketpair(0x1a, 0x0, 0x7d, &(0x7f0000000000)) 08:32:16 executing program 3: socketpair(0x26, 0x5, 0x0, &(0x7f0000000040)) 08:32:16 executing program 2: openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:16 executing program 0: socketpair(0x1a, 0x0, 0x7d, &(0x7f0000000000)) 08:32:17 executing program 5: socketpair(0x1a, 0x0, 0x7d, &(0x7f0000000000)) 08:32:17 executing program 3: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 08:32:17 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x20200) 08:32:17 executing program 2: socketpair(0x0, 0x8, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x10000000) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7, 0x6}}, './file0\x00'}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 08:32:17 executing program 0: socketpair(0xf, 0x800, 0x7bab, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0xa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x3bfe5616f144dfa) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) 08:32:17 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:17 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 08:32:17 executing program 4: syz_open_dev$dri(0x0, 0x20, 0x20200) 08:32:17 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:17 executing program 0: socketpair(0xf, 0x800, 0x7bab, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0xa) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x3bfe5616f144dfa) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) 08:32:17 executing program 4: syz_open_dev$dri(0x0, 0x20, 0x20200) 08:32:17 executing program 3: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 08:32:17 executing program 2: socketpair(0x0, 0x8, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) (async) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7, 0x6}}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 08:32:17 executing program 5: socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000)) 08:32:17 executing program 1: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 08:32:17 executing program 4: syz_open_dev$dri(0x0, 0x20, 0x20200) 08:32:17 executing program 0: socketpair(0xf, 0x800, 0x7bab, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) connect$bt_rfcomm(r0, &(0x7f0000000240)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0xa) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x100, 0x70bd2b, 0x25dfdbff, {0x0, 0x1}, ["", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x4000000}, 0x3bfe5616f144dfa) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) (async, rerun: 64) sendmsg$AUDIT_GET_FEATURE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x3fb, 0x400, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x801}, 0x20040000) (rerun: 64) 08:32:17 executing program 2: socketpair(0x0, 0x8, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, r1) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x12, 0xffffffffffffffff, 0x10000000) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x7, 0x6}}, './file0\x00'}) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_RECVERR(r2, 0x114, 0x5, &(0x7f0000000080)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) 08:32:17 executing program 5: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 08:32:17 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20200) 08:32:17 executing program 3: socketpair(0x0, 0x5, 0x0, &(0x7f0000000040)) 08:32:17 executing program 0: syz_open_dev$MSR(&(0x7f0000000000), 0x800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) write$tcp_mem(r0, &(0x7f0000000040)={0x5, 0x20, 0x3ff, 0x20, 0x3ff}, 0x48) 08:32:17 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) 08:32:17 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20200) 08:32:17 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 08:32:17 executing program 0: syz_open_dev$MSR(&(0x7f0000000000), 0x800, 0x0) (async, rerun: 32) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) write$tcp_mem(r0, &(0x7f0000000040)={0x5, 0x20, 0x3ff, 0x20, 0x3ff}, 0x48) 08:32:17 executing program 5: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 08:32:17 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x0, 0x20200) 08:32:17 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f0000000040)) 08:32:17 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 08:32:17 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) (async) 08:32:18 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) 08:32:18 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f0000000040)) 08:32:18 executing program 0: syz_open_dev$MSR(&(0x7f0000000000), 0x800, 0x0) (async) syz_open_dev$MSR(&(0x7f0000000000), 0x800, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) write$tcp_mem(r0, &(0x7f0000000040)={0x5, 0x20, 0x3ff, 0x20, 0x3ff}, 0x48) 08:32:18 executing program 1: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 08:32:18 executing program 5: socketpair(0x0, 0x3, 0x0, &(0x7f0000000000)) 08:32:18 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) 08:32:18 executing program 3: socketpair(0x26, 0x0, 0x0, &(0x7f0000000040)) 08:32:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x25, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5e3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x4c}}, 0x20000000) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000340)=0x4) syz_io_uring_setup(0x5774, &(0x7f0000000040)={0x0, 0xe089, 0x800, 0x3, 0x2d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x26, 0x0, 0xffffffffffffffff, 0x0, r2, 0x2, 0x0, 0x1}, 0x9) 08:32:18 executing program 1: socketpair(0x2c, 0x3, 0x0, 0x0) 08:32:18 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) 08:32:18 executing program 4: syz_open_dev$dri(&(0x7f0000000040), 0x20, 0x0) 08:32:18 executing program 3: socketpair(0x26, 0x5, 0x0, 0x0) 08:32:18 executing program 1: socketpair(0x2c, 0x3, 0x0, 0x0) 08:32:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x25, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5e3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x4c}}, 0x20000000) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000340)=0x4) syz_io_uring_setup(0x5774, &(0x7f0000000040)={0x0, 0xe089, 0x800, 0x3, 0x2d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x26, 0x0, 0xffffffffffffffff, 0x0, r2, 0x2, 0x0, 0x1}, 0x9) (async) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x26, 0x0, 0xffffffffffffffff, 0x0, r2, 0x2, 0x0, 0x1}, 0x9) 08:32:18 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x25, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5e3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x4c}}, 0x20000000) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000340)=0x4) syz_io_uring_setup(0x5774, &(0x7f0000000040)={0x0, 0xe089, 0x800, 0x3, 0x2d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x26, 0x0, 0xffffffffffffffff, 0x0, r2, 0x2, 0x0, 0x1}, 0x9) 08:32:18 executing program 3: socketpair(0x26, 0x5, 0x0, 0x0) 08:32:18 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 08:32:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x25, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5e3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x4c}}, 0x20000000) (async) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f00000002c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r1, 0x25, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x5e3}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x1}]}, 0x4c}}, 0x20000000) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) getsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000180), &(0x7f0000000340)=0x4) syz_io_uring_setup(0x5774, &(0x7f0000000040)={0x0, 0xe089, 0x800, 0x3, 0x2d}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r4, 0x0, &(0x7f0000000140)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x26, 0x0, 0xffffffffffffffff, 0x0, r2, 0x2, 0x0, 0x1}, 0x9) 08:32:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:18 executing program 1: socketpair(0x2c, 0x3, 0x0, 0x0) 08:32:18 executing program 3: socketpair(0x26, 0x5, 0x0, 0x0) 08:32:18 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 08:32:18 executing program 4: socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x4e20, @remote}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {0x6}}, './file0\x00'}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000001c0)={0xffffffffffffffff}, 0x2, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x2, {0xa, 0x4e20, 0x5dd, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, r3}}, 0x38) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:18 executing program 5: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 08:32:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) socketpair(0x8, 0x0, 0x100003fe, &(0x7f0000000080)) 08:32:18 executing program 3: socketpair(0x26, 0x0, 0xffffff02, &(0x7f0000000040)) 08:32:18 executing program 4: socketpair(0x2c, 0x0, 0x1f, &(0x7f0000000000)) 08:32:18 executing program 1: ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, &(0x7f00000000c0)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xa3c2}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000002a00)={{0x1, 0x1, 0x18, r0}, './file1\x00'}) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000002a40)={0x0, 0x0, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000002a80)={{0x1, 0x1, 0x18, r2, {0x4b}}, './file1\x00'}) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r0, 0xc018937c, &(0x7f00000028c0)=ANY=[@ANYBLOB="80", @ANYRES32=0xffffffffffffffff, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = syz_open_dev$MSR(&(0x7f0000002900), 0xf1d, 0x0) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000002940), 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r3, 0xc0189378, &(0x7f0000002980)={{0x1, 0x1, 0x18, r4, {r5}}, './file1\x00'}) mount$fuseblk(&(0x7f0000000040), &(0x7f0000002180)='./file1\x00', &(0x7f00000021c0), 0x1019, &(0x7f0000002740)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',g{oup_id=', @ANYRESDEC=0xee00, @ANYBLOB="2c626c6b73697a653d3078303030303030303030303030303830302c6f626a5f757365723d2c736d61636b66736861743d3aa0175c27c8d6cfc6b8a1b8f0464bc563fa08c7e249e8558422b6a88d4373221a75ec42257a47cb53431055dd018d0c9c01170deb397d666b1b049f2df85ee4bf71170102ee113e5542653fd46317ef363358ce845a476acd149ac30bf532c170aacb17177084ed307af504c5a1e663476e85b6875f12ce080420c184ba1945cc695431e69afe619c020c2f830ca787c09dce5b44bbdcb4e2be35002c736d61636b6673666c6f6f723d2f70726f632f7468726561642d73656c662f617474722f65786563002c00"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000002200), 0x2, 0x0) clock_gettime(0x5, &(0x7f00000029c0)) 08:32:18 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000200)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="01110000000000002e2f66696c00c3c05983331b63dc109df7041fdca227da3966068f1d0be8a73d3130166d64a62c680f40afac0e56e3d7d4a0b5b9014dfe909fb710dd2bc2697bf3586fc1e186e5eea173e5e220627cfb0f05e3dd51776f971306fa7f12fc858a1af4aaf2fe14053f07c26ad979a0270fc24beea10476a4266b26252db4ca7419d230030000000000000044ed970c89dad95d1ce0fa020000ab339ac61d21116e7007"]) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) read$FUSE(r0, &(0x7f00000002c0)={0x2020, 0x0, 0x0}, 0x2020) read$FUSE(r0, &(0x7f0000002300)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r0, &(0x7f0000004340)={0x90, 0x0, r4, {0x5, 0x1, 0x71f, 0x2, 0xd5, 0xfffffe00, {0x2, 0x1, 0x7fff, 0x7, 0x9, 0xa15, 0xac9c, 0x7, 0x7, 0x3000, 0x9, 0xee00, r5, 0x0, 0x2}}}, 0x90) epoll_pwait2(r1, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}], 0x6, &(0x7f0000000140)={r2, r3+10000000}, &(0x7f0000000180)={[0x5]}, 0x8) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r0, 0x10000000) sched_rr_get_interval(0x0, &(0x7f00000001c0)) 08:32:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) socketpair(0x8, 0x0, 0x100003fe, &(0x7f0000000080)) 08:32:18 executing program 1: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000000c0)={@ax25={{0x3, @default, 0x5}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, {&(0x7f0000000040)=""/38, 0x26}, &(0x7f0000000080), 0x20}, 0xa0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020029bd7000fddbdf250d00000008000300", @ANYRES32=0x0, @ANYBLOB="050000ff000100000008003a000000000005002d0000000000050038000100"/48], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20000084) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0x4}}, './file0\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, 0x0, 0x400, 0x70bd27, 0x25dfdbfd, {}, [@BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x200}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040004}, 0x8018) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r2, 0xc018937d, &(0x7f0000000740)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001800)={@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e23, @remote}, 0x3, 0x2, 0x0, 0x2}}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f00000017c0), 0x15}, 0xa0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r2, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000280)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000300), &(0x7f0000000340), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000380)}}, 0x10) 08:32:18 executing program 5: socketpair(0x2c, 0x3, 0x0, 0x0) 08:32:18 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, r1, {0x5}}, './file0\x00'}) (async) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:18 executing program 4: socketpair(0x2c, 0x0, 0x1f, &(0x7f0000000000)) 08:32:18 executing program 3: socketpair(0x2, 0x3, 0x1, &(0x7f0000000040)) 08:32:18 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) socketpair(0x8, 0x0, 0x100003fe, &(0x7f0000000080)) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r0, 0xc01064c1, &(0x7f0000000040)) (async) socketpair(0x8, 0x0, 0x100003fe, &(0x7f0000000080)) (async) 08:32:18 executing program 5: socketpair(0x2c, 0x3, 0x0, 0x0) 08:32:19 executing program 2: socketpair(0x0, 0xe, 0xe409, &(0x7f0000000000)) 08:32:19 executing program 3: socketpair(0x2, 0x3, 0x1, &(0x7f0000000040)) 08:32:19 executing program 4: socketpair(0x2c, 0x0, 0x1f, &(0x7f0000000000)) 08:32:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xa8}}, './file0\x00'}) 08:32:19 executing program 0: socketpair(0x9, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./XH\x00\x000\x00']) 08:32:19 executing program 5: socketpair(0x2c, 0x3, 0x0, 0x0) 08:32:19 executing program 3: socketpair(0x2, 0x3, 0x1, &(0x7f0000000040)) 08:32:19 executing program 4: socketpair(0x0, 0x0, 0x1f, &(0x7f0000000000)) 08:32:19 executing program 2: socketpair(0x0, 0xe, 0xe409, &(0x7f0000000000)) 08:32:19 executing program 5: ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32, @ANYBLOB="000000850c2f66696c653000"]) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) read$FUSE(r3, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) read$FUSE(r2, &(0x7f0000002800)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_CREATE_OPEN(r3, &(0x7f0000004840)={0xa0, 0x0, r8, {{0x2, 0x0, 0xffffffffffffedab, 0x8000000000000001, 0x4, 0x9, {0x2, 0x8000000000000000, 0x8, 0xfffffffffffffffc, 0x4, 0x3ff, 0x3, 0x1ff, 0xfff, 0xc000, 0x81, r6, r7, 0x1, 0x10001}}, {0x0, 0x3}}}, 0xa0) getresgid(&(0x7f0000000440)=0x0, &(0x7f0000000480)=0x0, &(0x7f00000004c0)=0x0) r14 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) r15 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r16 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) read$FUSE(r15, &(0x7f0000000340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(r16, &(0x7f0000002480)={0x60, 0x0, r17}, 0x60) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r4, 0xc018937b, &(0x7f0000004900)={{0x1, 0x1, 0x18, r0, {0x0, r12}}, './file0\x00'}) getgroups(0x4, &(0x7f0000004940)=[r13, r10, r10, r13]) r20 = getuid() read$FUSE(0xffffffffffffffff, &(0x7f0000004980)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f00000069c0)={{0x1, 0x1, 0x18, r3, {r9, r13}}, './file0\x00'}) write$FUSE_DIRENTPLUS(r14, &(0x7f0000006a00)={0x290, 0x0, r17, [{{0x2, 0x2, 0x9, 0x2, 0x10000, 0x80000001, {0x1, 0x2, 0x8, 0xfffffffffffffbff, 0x3, 0x0, 0xf, 0x2, 0x81, 0x8000, 0x8, r18, r19, 0x80000000, 0x2}}, {0x3, 0x100000001, 0x4, 0x2, '%[,-'}}, {{0x4, 0x1, 0x8000000000000000, 0x5, 0xad, 0xffffffff, {0x5, 0x9, 0x4, 0x2, 0xe42d, 0x3, 0x401, 0x1000, 0x2cb, 0x4000, 0x3, r20, r21, 0x81, 0x1000}}, {0x3, 0x2, 0x5, 0x10000, '-],\xb9\\'}}, {{0x3, 0x2, 0x1, 0x6ef, 0x0, 0x2, {0x4, 0x3, 0x8, 0xc6c, 0x7fff, 0xcffc, 0x3f, 0x6, 0x3, 0xa000, 0x81, r6, r10, 0x10000, 0xffffffff}}, {0x1, 0x6, 0x4, 0xffff, '+)&)'}}, {{0x3, 0x1, 0xb956, 0x7, 0x8, 0x41e1, {0x0, 0x8, 0x3, 0x9, 0xf3b4, 0x0, 0xff, 0x59c, 0x400, 0x6000, 0x8000, r6, r22, 0x8, 0x9}}, {0x4, 0x4, 0x8, 0x9, 'fuseblk\x00'}}]}, 0x290) getresuid(&(0x7f0000000500), &(0x7f0000000540), &(0x7f0000000580)=0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r15, 0xc0189377, &(0x7f0000006cc0)={{0x1, 0x1, 0x18, r16, {0xcdb, 0xc4}}, './file0\x00'}) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)={0x160, 0x0, r5, [{{0x2, 0x3, 0x5, 0xee8d, 0x7a19, 0xffff, {0x5, 0xfffffffffffffffb, 0x9, 0x9, 0x1f, 0x1f, 0x5, 0x7fffffff, 0x5, 0x0, 0x3f, r6, r11, 0x80, 0x101}}, {0x1, 0x40, 0x0, 0xcbdc}}, {{0x4, 0x1, 0x100, 0x10001, 0x9, 0x8, {0x4, 0x100000000, 0x3, 0x10001, 0x6, 0x5, 0x9, 0xfffffe01, 0x4, 0xa000, 0x9, r23, r7, 0x401, 0x1000}}, {0x1, 0xac56, 0x1f, 0x5, '/sys/kernel/debug/binder/state\x00'}}]}, 0x160) getresuid(&(0x7f0000000200), &(0x7f0000000240)=0x0, &(0x7f0000000280)) mount$fuseblk(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x140c0, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB="2c726f6f74656f64653d38303d30303030303030ea8b61fdd4568174855aa41a282c755265725f69643d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=r7, @ANYBLOB=',blksize=0x0000000000000000,allow_other,default_permissions,allow_other,blksize=0x0000000000001400,uid<', @ANYRESDEC=0xee01, @ANYBLOB=',dont_measure,dont_appraise,fowner<', @ANYRESDEC=r24, @ANYBLOB=',uid<', @ANYRESDEC=0x0, @ANYBLOB=',audit,audit,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) write$FUSE_NOTIFY_INVAL_INODE(r3, &(0x7f0000000100)={0x28, 0x2, 0x0, {0x2, 0x4, 0x3}}, 0x28) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) 08:32:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xa8}}, './file0\x00'}) 08:32:19 executing program 0: socketpair(0x9, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./XH\x00\x000\x00']) 08:32:19 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000040)) 08:32:19 executing program 2: socketpair(0x0, 0xe, 0xe409, &(0x7f0000000000)) 08:32:19 executing program 0: socketpair(0x9, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) (async, rerun: 32) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {0xff}}, './file0\x00'}) (rerun: 32) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r2, 0xc0189378, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./XH\x00\x000\x00']) 08:32:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) r5 = syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r4, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r5, {0x2}}, './file0/file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r3, 0xc0189374, &(0x7f0000000180)={{0x1, 0x1, 0x18, r0, {0xa8}}, './file0\x00'}) 08:32:19 executing program 5: socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) 08:32:19 executing program 2: socketpair(0x0, 0xe, 0xfffffffd, &(0x7f0000000000)) 08:32:19 executing program 5: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r2, 0xc0189372, &(0x7f00000002c0)={{0x1, 0x1, 0x18, r1, {0x4}}, './file0\x00'}) getresuid(&(0x7f0000000300), &(0x7f0000000340)=0x0, &(0x7f0000000380)) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r0, {0xee01, 0x0}}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000400)={{0x1, 0x1, 0x18, r3, {r4, r5}}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) sendmsg$AUDIT_USER_AVC(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x48, 0x453, 0x8, 0x70bd2c, 0x25dfdbfd, "9231186206ef762d7f2f16e81a7546c4a5def487182363290f407ef989d2f7d695c681a983351df40b5fdb47934e2ddd5b5d24ececb9", ["", "", "", "", ""]}, 0x48}, 0x1, 0x0, 0x0, 0x4004081}, 0x20040004) connect$bt_rfcomm(r0, &(0x7f0000000180)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x40}, 0xa) sendmsg$AUDIT_SET_FEATURE(r1, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x3fa, 0x20, 0x70bd25, 0x25dfdbfe, {0x1, 0x1, 0x1}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x2004800}, 0x80) 08:32:19 executing program 4: socketpair(0x0, 0x0, 0x1f, &(0x7f0000000000)) 08:32:19 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}, 0xfd}, 0x18) 08:32:19 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000040)) 08:32:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0/file0\x00'}) 08:32:19 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) 08:32:19 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}, 0xfd}, 0x18) socketpair(0xa, 0x0, 0x400, &(0x7f0000000040)) (async) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}, 0xfd}, 0x18) (async) 08:32:19 executing program 2: socketpair(0x0, 0xe, 0xfffffffd, &(0x7f0000000000)) 08:32:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:19 executing program 2: socketpair(0x0, 0xe, 0xfffffffd, &(0x7f0000000000)) 08:32:19 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) 08:32:19 executing program 4: socketpair(0x0, 0x0, 0x1f, &(0x7f0000000000)) 08:32:19 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000040)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, 0x0, 0x2, {0x0, 0x0, 0x4}, 0xfd}, 0x18) 08:32:19 executing program 3: socketpair(0x0, 0x3, 0x1, &(0x7f0000000040)) 08:32:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:19 executing program 5: socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)) 08:32:19 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) write$FUSE_ENTRY(r2, &(0x7f00000001c0)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0x3, 0x9, 0x7, 0x3, 0x9, {0x0, 0xe6e3, 0x3, 0x7fffffffffffffff, 0x3, 0x2, 0x3ed, 0x0, 0x3ff, 0x6000, 0x8, r3, 0x0, 0x80000000, 0x73}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2e}}, './file0\x00'}) 08:32:19 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:19 executing program 0: socketpair(0x26, 0xa, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x9f}, 0xa) 08:32:19 executing program 5: socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)) 08:32:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 0: socketpair(0x26, 0xa, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x9f}, 0xa) (async) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x9f}, 0xa) 08:32:20 executing program 4: socketpair(0x2c, 0x0, 0x0, &(0x7f0000000000)) 08:32:20 executing program 3: socketpair(0x2, 0x0, 0x1, &(0x7f0000000040)) 08:32:20 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) write$FUSE_ENTRY(r2, &(0x7f00000001c0)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0x3, 0x9, 0x7, 0x3, 0x9, {0x0, 0xe6e3, 0x3, 0x7fffffffffffffff, 0x3, 0x2, 0x3ed, 0x0, 0x3ff, 0x6000, 0x8, r3, 0x0, 0x80000000, 0x73}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2e}}, './file0\x00'}) socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) getresuid(&(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)) (async) write$FUSE_ENTRY(r2, &(0x7f00000001c0)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0x3, 0x9, 0x7, 0x3, 0x9, {0x0, 0xe6e3, 0x3, 0x7fffffffffffffff, 0x3, 0x2, 0x3ed, 0x0, 0x3ff, 0x6000, 0x8, r3, 0x0, 0x80000000, 0x73}}}, 0x90) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2e}}, './file0\x00'}) (async) 08:32:20 executing program 0: socketpair(0x26, 0xa, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x9f}, 0xa) socketpair(0x26, 0xa, 0x400, &(0x7f0000000000)) (async) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x9f}, 0xa) (async) 08:32:20 executing program 4: socketpair(0x2c, 0x0, 0x0, 0x0) 08:32:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 5: socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)) 08:32:20 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002100)={0x60, 0x0, r0, {{0x7, 0x3, 0x800, 0xffffffffffffffff, 0x2, 0x2cb, 0x0, 0x3456d8a4}}}, 0x60) 08:32:20 executing program 2: socketpair(0x0, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00'}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) getresuid(&(0x7f0000000100)=0x0, &(0x7f0000000140), &(0x7f0000000180)) write$FUSE_ENTRY(r2, &(0x7f00000001c0)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0x3, 0x9, 0x7, 0x3, 0x9, {0x0, 0xe6e3, 0x3, 0x7fffffffffffffff, 0x3, 0x2, 0x3ed, 0x0, 0x3ff, 0x6000, 0x8, r3, 0x0, 0x80000000, 0x73}}}, 0x90) (async) write$FUSE_ENTRY(r2, &(0x7f00000001c0)={0x90, 0xfffffffffffffff5, 0x0, {0x6, 0x3, 0x9, 0x7, 0x3, 0x9, {0x0, 0xe6e3, 0x3, 0x7fffffffffffffff, 0x3, 0x2, 0x3ed, 0x0, 0x3ff, 0x6000, 0x8, r3, 0x0, 0x80000000, 0x73}}}, 0x90) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x2e}}, './file0\x00'}) 08:32:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 4: socketpair(0x2c, 0x0, 0x0, 0x0) 08:32:20 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002100)={0x60, 0x0, r0, {{0x7, 0x3, 0x800, 0xffffffffffffffff, 0x2, 0x2cb, 0x0, 0x3456d8a4}}}, 0x60) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002100)={0x60, 0x0, r0, {{0x7, 0x3, 0x800, 0xffffffffffffffff, 0x2, 0x2cb, 0x0, 0x3456d8a4}}}, 0x60) (async) 08:32:20 executing program 3: socketpair(0x2, 0x0, 0x1, &(0x7f0000000040)) 08:32:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 5: socketpair(0x0, 0x2, 0x0, &(0x7f0000000040)) 08:32:20 executing program 4: socketpair(0x2c, 0x0, 0x0, 0x0) 08:32:20 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002100)={0x60, 0x0, r0, {{0x7, 0x3, 0x800, 0xffffffffffffffff, 0x2, 0x2cb, 0x0, 0x3456d8a4}}}, 0x60) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) read$FUSE(0xffffffffffffffff, &(0x7f0000000040)={0x2020}, 0x2020) (async) write$FUSE_STATFS(0xffffffffffffffff, &(0x7f0000002100)={0x60, 0x0, r0, {{0x7, 0x3, 0x800, 0xffffffffffffffff, 0x2, 0x2cb, 0x0, 0x3456d8a4}}}, 0x60) (async) 08:32:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0/file0\x00'}) 08:32:20 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x3f85c1d0ce635a7a}, 0x30004004) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0/file0\x00'}) 08:32:20 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 3: socketpair(0x2, 0x0, 0x1, &(0x7f0000000040)) 08:32:20 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)) 08:32:20 executing program 1: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:20 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x3f85c1d0ce635a7a}, 0x30004004) (async) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x3f85c1d0ce635a7a}, 0x30004004) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:20 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:20 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) r4 = syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000200)={{0x1, 0x1, 0x18, r4, {0x2}}, './file0/file0\x00'}) 08:32:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)) 08:32:21 executing program 1: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:21 executing program 0: ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x401}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x3fb, 0x200, 0x70bd2b, 0x25dfdbfd, "", [""]}, 0x10}, 0x1, 0x0, 0x0, 0x3f85c1d0ce635a7a}, 0x30004004) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:21 executing program 5: socketpair(0x1, 0x0, 0x0, &(0x7f0000000040)) 08:32:21 executing program 2: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000040)) 08:32:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 0: socketpair(0xa, 0x0, 0x401, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) 08:32:21 executing program 1: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:21 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 5: socketpair(0x1, 0x2, 0x0, 0x0) 08:32:21 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:21 executing program 5: socketpair(0x1, 0x2, 0x0, 0x0) 08:32:21 executing program 2: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000140)={{0x1, 0x1, 0x18, r1, {r2}}, './file0/file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 0: socketpair(0xa, 0x0, 0x401, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) 08:32:21 executing program 2: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:21 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000040)) 08:32:21 executing program 5: socketpair(0x1, 0x2, 0x0, 0x0) 08:32:21 executing program 0: socketpair(0xa, 0x0, 0x401, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r0, 0x12, 0x2, &(0x7f0000000040)=""/115, &(0x7f00000000c0)=0x73) 08:32:21 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) socketpair(0x10, 0xa, 0xfffffeff, &(0x7f0000000000)) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 2: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:21 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:21 executing program 0: getitimer(0x1, &(0x7f0000000040)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) 08:32:21 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:21 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 3: socketpair(0x2, 0x3, 0x0, &(0x7f0000000040)) 08:32:22 executing program 0: getitimer(0x1, &(0x7f0000000040)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) 08:32:22 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x0) 08:32:22 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 5: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 0: getitimer(0x1, &(0x7f0000000040)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) 08:32:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 1: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x8000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000100)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 3: socketpair(0x2, 0x3, 0x1, 0x0) 08:32:22 executing program 4: ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18}, './file0\x00'}) syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:22 executing program 2: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x0) 08:32:22 executing program 5: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:22 executing program 1: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 3: socketpair(0x2, 0x3, 0x1, 0x0) 08:32:22 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:22 executing program 2: getitimer(0x1, &(0x7f0000000040)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) 08:32:22 executing program 5: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0/file0\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) read$FUSE(r6, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r5, r8, r8]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt={'euid<', r10}}]}}) write$FUSE_STATFS(r3, &(0x7f00000001c0)={0x60, 0x0, r7, {{0x8000000000000000, 0x50000000, 0x7, 0x5, 0x10000, 0x80000001, 0x6, 0x7}}}, 0x60) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:22 executing program 0: ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800", @ANYRES32=0xffffffffffffffff, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(0xffffffffffffffff, 0xc01064c7, &(0x7f0000000080)={0x7, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000010000001800", @ANYRES32, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='./file0\x00']) (async) ioctl$AUTOFS_DEV_IOCTL_READY(r0, 0xc0189376, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7fff}}, './file0\x00'}) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) 08:32:22 executing program 5: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:22 executing program 2: getitimer(0x1, &(0x7f0000000040)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) 08:32:22 executing program 3: socketpair(0x2, 0x3, 0x1, 0x0) 08:32:22 executing program 4: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0/file0\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) read$FUSE(r6, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r5, r8, r8]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt={'euid<', r10}}]}}) write$FUSE_STATFS(r3, &(0x7f00000001c0)={0x60, 0x0, r7, {{0x8000000000000000, 0x50000000, 0x7, 0x5, 0x10000, 0x80000001, 0x6, 0x7}}}, 0x60) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:22 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:22 executing program 0: socketpair(0xa, 0x0, 0x8000400, &(0x7f0000000000)) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x2b, 0x1}) 08:32:22 executing program 2: getitimer(0x1, &(0x7f0000000040)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) sendmsg$AUDIT_GET_FEATURE(r2, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x3fb, 0x300, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x40800}, 0x4000001) 08:32:22 executing program 3: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x80000) 08:32:22 executing program 4: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:22 executing program 0: socketpair(0xa, 0x0, 0x8000400, &(0x7f0000000000)) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x2b, 0x1}) 08:32:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0/file0\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) read$FUSE(r6, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r5, r8, r8]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt={'euid<', r10}}]}}) write$FUSE_STATFS(r3, &(0x7f00000001c0)={0x60, 0x0, r7, {{0x8000000000000000, 0x50000000, 0x7, 0x5, 0x10000, 0x80000001, 0x6, 0x7}}}, 0x60) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:22 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:22 executing program 3: socketpair(0x10, 0x3, 0xfffffeff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x8, r0, 0x80003}) socketpair(0x2c, 0x800, 0x0, &(0x7f0000000040)) 08:32:22 executing program 2: getitimer(0x1, &(0x7f0000000040)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r1, {r0}}, './file0\x00'}) 08:32:22 executing program 4: syz_open_dev$dri(0x0, 0xa8d, 0x80000) 08:32:22 executing program 0: socketpair(0xa, 0x0, 0x8000400, &(0x7f0000000000)) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x2b, 0x1}) socketpair(0xa, 0x0, 0x8000400, &(0x7f0000000000)) (async) ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)={0x2b, 0x1}) (async) 08:32:22 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:22 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:22 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0/file0\x00'}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) read$FUSE(r6, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r5, r8, r8]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r4}, 0x2c, {'group_id', 0x3d, r9}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt={'euid<', r10}}]}}) write$FUSE_STATFS(r3, &(0x7f00000001c0)={0x60, 0x0, r7, {{0x8000000000000000, 0x50000000, 0x7, 0x5, 0x10000, 0x80000001, 0x6, 0x7}}}, 0x60) 08:32:22 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r1, &(0x7f00000001c0)=""/119, 0x77) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:22 executing program 2: getitimer(0x1, &(0x7f0000000040)) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:22 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x200, 0x70bd27, 0xfffffff7, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2e}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0xc, 0x4) 08:32:23 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x0) 08:32:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0/file0\x00'}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) read$FUSE(r5, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r4, r6, r6]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f00000003c0)={{0x1, 0x1, 0x18, r1, {0xffffffffffffffff, 0xee01}}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt={'euid<', r8}}]}}) 08:32:23 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:23 executing program 2: getitimer(0x1, &(0x7f0000000040)) 08:32:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r1, &(0x7f00000001c0)=""/119, 0x77) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:23 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x200, 0x70bd27, 0xfffffff7, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2e}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0xc, 0x4) 08:32:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0, 0x0}}, './file0/file0\x00'}) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) read$FUSE(r5, &(0x7f00000007c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) getgroups(0x3, &(0x7f0000000380)=[r4, r6, r6]) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:23 executing program 5: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x200, 0x70bd27, 0xfffffff7, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2e}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0xc, 0x4) 08:32:23 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r1, &(0x7f00000001c0)=""/119, 0x77) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) 08:32:23 executing program 2: getitimer(0x0, &(0x7f0000000040)) 08:32:23 executing program 0: r0 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r0, 0x200, 0x70bd27, 0xfffffff7, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2e}, @BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x8000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x4050) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000040)=0xc, 0x4) 08:32:23 executing program 5: syz_open_dev$dri(&(0x7f00000001c0), 0x0, 0x80000) 08:32:23 executing program 4: syz_open_dev$dri(&(0x7f00000001c0), 0xa8d, 0x0) 08:32:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0}}, './file0/file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) read$FUSE(r4, &(0x7f00000007c0)={0x2020}, 0x2020) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:23 executing program 2: getitimer(0x0, &(0x7f0000000040)) 08:32:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r1, &(0x7f00000001c0)=""/119, 0x77) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r0, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, r1, {0x8000}}, './file0\x00'}) 08:32:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0}}, './file0/file0\x00'}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:23 executing program 5: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x6, 0x80000000}}, './file0\x00'}) r2 = memfd_create(&(0x7f0000000140)='/dev/udmabuf\x00', 0x6) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0xff, 0x81}}, './file0\x00'}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080), 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) socketpair(0x26, 0x3, 0x0, &(0x7f0000000000)) 08:32:23 executing program 0: socketpair(0x1, 0x800, 0x40000400, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x4, 0x7f, 0x480}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 08:32:23 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff}, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000340)={0x690, 0x480, 0x640, 0x2000, 0x9, 0x400, 0x4, 0x1, {0x1000, 0x4, 0x1}, {0x3, 0x1}, {0xfb, 0x4, 0x1}, {0x5, 0xffffffbc}, 0x3, 0xfb7382b61bf7187e, 0xb70, 0x7fff, 0x0, 0x4, 0xf979, 0xfffffff7, 0x1, 0x4, 0x7f, 0x6, 0x25, 0x200, 0x3, 0x6}) 08:32:23 executing program 2: getitimer(0x0, &(0x7f0000000040)) 08:32:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r1, &(0x7f00000001c0)=""/119, 0x77) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) 08:32:23 executing program 5: r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r1, 0x10000000) 08:32:23 executing program 0: socketpair(0x1, 0x800, 0x40000400, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 32) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x4, 0x7f, 0x480}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 08:32:23 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff}, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000340)={0x690, 0x480, 0x640, 0x2000, 0x9, 0x400, 0x4, 0x1, {0x1000, 0x4, 0x1}, {0x3, 0x1}, {0xfb, 0x4, 0x1}, {0x5, 0xffffffbc}, 0x3, 0xfb7382b61bf7187e, 0xb70, 0x7fff, 0x0, 0x4, 0xf979, 0xfffffff7, 0x1, 0x4, 0x7f, 0x6, 0x25, 0x200, 0x3, 0x6}) 08:32:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0}}, './file0/file0\x00'}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:23 executing program 2: getitimer(0x1, 0x0) 08:32:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r1, &(0x7f00000001c0)=""/119, 0x77) 08:32:23 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff}, 0x1) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000340)={0x690, 0x480, 0x640, 0x2000, 0x9, 0x400, 0x4, 0x1, {0x1000, 0x4, 0x1}, {0x3, 0x1}, {0xfb, 0x4, 0x1}, {0x5, 0xffffffbc}, 0x3, 0xfb7382b61bf7187e, 0xb70, 0x7fff, 0x0, 0x4, 0xf979, 0xfffffff7, 0x1, 0x4, 0x7f, 0x6, 0x25, 0x200, 0x3, 0x6}) 08:32:23 executing program 0: socketpair(0x1, 0x800, 0x40000400, &(0x7f0000000000)) r0 = socket$phonet_pipe(0x23, 0x5, 0x2) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (rerun: 64) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000080)={0x3, 0x4, 0x7f, 0x480}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) 08:32:23 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r0, 0xc018937b, &(0x7f0000000180)={{0x1, 0x1, 0x18, r2, {0x0}}, './file0/file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:23 executing program 2: getitimer(0x1, 0x0) 08:32:23 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) read$fb(0xffffffffffffffff, &(0x7f00000001c0)=""/119, 0x77) 08:32:23 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff}, 0x1) 08:32:24 executing program 5: r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r1, 0x10000000) 08:32:24 executing program 2: getitimer(0x1, 0x0) 08:32:24 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_HARDIF(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080025bd7000fbdbdf250500000008000b000700000008000600", @ANYRES32=0x0, @ANYBLOB="05002d000000000008002b0016ad00000f130c53f45e848735d81236edc9e83d1b01b7cea02b9b6de6ea9d2c2229783183d28c8f334f508eb2a5ef6f614eb0f1b020f5376c82627a670b8c909ef63378d820561d0d151d03040bd78f012f977a41d95eabee1155b749bb7657c72685fd05b3afa016adf8834f7d527530738c1adab70b0f57e32b5ad44fc40456ca490ee9f25a596c77fa5614cc29e73fe440691b"], 0x34}, 0x1, 0x0, 0x0, 0x885}, 0xc0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:24 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) read$fb(0xffffffffffffffff, &(0x7f00000001c0)=""/119, 0x77) 08:32:24 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:24 executing program 0: socketpair(0x28, 0xa, 0x7, &(0x7f0000000000)) 08:32:24 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x2, 0x0, &(0x7f0000000040)=[0x0, 0x0]}) read$fb(0xffffffffffffffff, &(0x7f00000001c0)=""/119, 0x77) 08:32:24 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff}, 0x1) 08:32:24 executing program 0: socketpair(0x28, 0xa, 0x7, &(0x7f0000000000)) socketpair(0x28, 0xa, 0x7, &(0x7f0000000000)) (async) 08:32:24 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:24 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:24 executing program 0: socketpair(0x28, 0xa, 0x7, &(0x7f0000000000)) [ 1607.434495][ T1232] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.440844][ T1232] ieee802154 phy1 wpan1: encryption failed: -22 08:32:25 executing program 5: r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x7ffffffff002, 0x0, 0x10, r1, 0x10000000) 08:32:25 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:25 executing program 3: ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000180)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="043f000334c9010e58b9150000000900000000000000653000"]) r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:25 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r1, 0xc0189375, &(0x7f0000000140)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:25 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff}, 0x1) 08:32:25 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001080)={@phonet={0x23, 0x9, 0x80, 0xdb}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x4a}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$MAP_CREATE(0x4, &(0x7f00000001c0)=@bloom_filter, 0x48) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 08:32:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:25 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) syz_io_uring_submit(0x0, r1, &(0x7f0000000300)=@IORING_OP_STATX={0x15, 0x0, 0x0, r0, &(0x7f00000001c0), &(0x7f00000002c0)='./file0\x00', 0x7ff}, 0x1) 08:32:25 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001080)={@phonet={0x23, 0x9, 0x80, 0xdb}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x4a}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$MAP_CREATE(0x4, &(0x7f00000001c0)=@bloom_filter, 0x48) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) 08:32:25 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x40000, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:25 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:25 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:26 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:26 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:26 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001080)={@phonet={0x23, 0x9, 0x80, 0xdb}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x4a}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) bpf$MAP_CREATE(0x4, &(0x7f00000001c0)=@bloom_filter, 0x48) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f0000001140)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001480)={r2, 0xe0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x7, &(0x7f0000001200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000014c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000001280)=[{}], 0x8, 0x10, &(0x7f00000012c0), &(0x7f00000011c0), 0x8, 0x10, 0x8, 0x8, &(0x7f0000001340)}}, 0x10) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) setsockopt$RDS_GET_MR_FOR_DEST(r3, 0x114, 0x7, &(0x7f0000001080)={@phonet={0x23, 0x9, 0x80, 0xdb}, {&(0x7f0000000040)=""/4096, 0x1000}, &(0x7f0000001040), 0x4a}, 0xa0) (async) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000001180)={{0x1, 0x1, 0x18, r1}, './file0\x00'}) (async) bpf$MAP_CREATE(0x4, &(0x7f00000001c0)=@bloom_filter, 0x48) (async) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) (async) 08:32:26 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:26 executing program 5: r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) 08:32:26 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:26 executing program 4: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:26 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:26 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:26 executing program 1: mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:26 executing program 0: socketpair(0x1f, 0x1, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 08:32:26 executing program 1: mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:26 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:27 executing program 5: r0 = epoll_create1(0x80000) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:27 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:27 executing program 0: socketpair(0x1f, 0x1, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 08:32:27 executing program 1: mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:27 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000080)={0x22, 0x2}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:27 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) ioctl$FBIOPUT_CON2FBMAP(0xffffffffffffffff, 0x4610, &(0x7f0000000000)={0x2a, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:27 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:27 executing program 1: mount$fuse(0x0, 0x0, &(0x7f0000000340), 0x1000000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:27 executing program 0: socketpair(0x1f, 0x1, 0x400, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) (async) sendmsg$AUDIT_TTY_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x3f9, 0x800, 0x70bd28, 0x25dfdbfe, {}, [""]}, 0x18}, 0x1, 0x0, 0x0, 0x4008000}, 0x20000000) 08:32:27 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$fb(r0, &(0x7f00000001c0)=""/119, 0x77) 08:32:28 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:28 executing program 2: ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000040)={0x3d, 0x2}) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:28 executing program 1: mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x1000000, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:28 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:28 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(0xffffffffffffffff, &(0x7f00000001c0)=""/119, 0x77) 08:32:28 executing program 1: mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, &(0x7f0000000400)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1800}}, {@blksize={'blksize', 0x3d, 0x200}}], [{@dont_hash}, {@fowner_gt={'fowner>', 0xee00}}, {@dont_appraise}, {@euid_lt}]}}) 08:32:28 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(0xffffffffffffffff, &(0x7f00000001c0)=""/119, 0x77) 08:32:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:28 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:28 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:28 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(0xffffffffffffffff, &(0x7f00000001c0)=""/119, 0x77) 08:32:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) 08:32:28 executing program 1: mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0, 0x0) 08:32:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:28 executing program 5: epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:28 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 08:32:28 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) 08:32:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) 08:32:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:28 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0xfa}, 0x8) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000580)=[0x2, 0x7, 0x7ff], &(0x7f00000005c0)=[0x8000, 0x0, 0x7], &(0x7f0000000600)=[0x843, 0x0, 0xdb], &(0x7f0000000640)}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f00000002c0)={0x2, r12, 0x2}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) 08:32:28 executing program 0: socketpair(0x28, 0x0, 0x1, &(0x7f0000000000)) 08:32:28 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:28 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:28 executing program 3: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0xfa}, 0x8) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000580)=[0x2, 0x7, 0x7ff], &(0x7f00000005c0)=[0x8000, 0x0, 0x7], &(0x7f0000000600)=[0x843, 0x0, 0xdb], &(0x7f0000000640)}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f00000002c0)={0x2, r12, 0x2}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) 08:32:28 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) 08:32:28 executing program 0: socketpair(0x28, 0x0, 0x1, &(0x7f0000000000)) 08:32:28 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0xfa}, 0x8) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000580)=[0x2, 0x7, 0x7ff], &(0x7f00000005c0)=[0x8000, 0x0, 0x7], &(0x7f0000000600)=[0x843, 0x0, 0xdb], &(0x7f0000000640)}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f00000002c0)={0x2, r12, 0x2}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) 08:32:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) 08:32:29 executing program 0: socketpair(0x28, 0x0, 0x1, &(0x7f0000000000)) 08:32:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x10, r0, 0x10000000) 08:32:29 executing program 3: socket$inet_sctp(0x2, 0x4, 0x84) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x10, &(0x7f0000000000), 0x39) 08:32:29 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0xfa}, 0x8) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000580)=[0x2, 0x7, 0x7ff], &(0x7f00000005c0)=[0x8000, 0x0, 0x7], &(0x7f0000000600)=[0x843, 0x0, 0xdb], &(0x7f0000000640)}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f00000002c0)={0x2, r12, 0x2}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000200)={0xffffffffffffffff}, 0x4) 08:32:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x10, r0, 0x10000000) 08:32:29 executing program 5: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) 08:32:29 executing program 0: socketpair(0x1a, 0x0, 0x400, &(0x7f0000000080)) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8}, 0x8) 08:32:29 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0xfa}, 0x8) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000580)=[0x2, 0x7, 0x7ff], &(0x7f00000005c0)=[0x8000, 0x0, 0x7], &(0x7f0000000600)=[0x843, 0x0, 0xdb], &(0x7f0000000640)}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f00000002c0)={0x2, r12, 0x2}) 08:32:29 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x10, r0, 0x10000000) 08:32:29 executing program 3: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) 08:32:29 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x10000000) 08:32:29 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:29 executing program 3: socketpair(0x0, 0x80000, 0x400000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_READY(r1, 0xc0189376, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x3}}, './file0\x00'}) write$tcp_mem(r2, &(0x7f0000000100)={0x8, 0x20, 0xb62, 0x20, 0x1}, 0x48) ioctl$DMA_BUF_SET_NAME_A(r1, 0x40046201, &(0x7f0000000040)='(-&)\x00') 08:32:29 executing program 0: socketpair(0x1a, 0x0, 0x400, &(0x7f0000000080)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8}, 0x8) 08:32:29 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r5, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r6, 0x2, r9) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r8, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r7, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r8}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r10 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r8, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r11, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0xfa}, 0x8) ioctl$FBIOPUTCMAP(r4, 0x4605, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000580)=[0x2, 0x7, 0x7ff], &(0x7f00000005c0)=[0x8000, 0x0, 0x7], &(0x7f0000000600)=[0x843, 0x0, 0xdb], &(0x7f0000000640)}) ioctl$DMA_HEAP_IOCTL_ALLOC(r10, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:30 executing program 5: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:30 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x10, r0, 0x10000000) 08:32:30 executing program 0: socketpair(0x1a, 0x0, 0x400, &(0x7f0000000080)) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x8}, 0x8) 08:32:30 executing program 5: epoll_create1(0x0) epoll_pwait(0xffffffffffffffff, &(0x7f0000000000)=[{}, {}, {}], 0x3, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:30 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000540)={0xfa}, 0x8) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:30 executing program 4: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x10, r0, 0x10000000) 08:32:30 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@flag='sync'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_type}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '!$'}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsdef}, {@smackfsfloor}, {@subj_type={'subj_type', 0x3d, '[}{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$,}'}}]}}) 08:32:30 executing program 3: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x730}}, './file0\x00'}) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x2, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 08:32:30 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:30 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:30 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x10, r0, 0x10000000) 08:32:30 executing program 4: socketpair(0xa, 0x7000000, 0x400, &(0x7f0000000000)) 08:32:30 executing program 3: socketpair(0x10, 0x3, 0x1ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_io_uring_setup(0x660d, &(0x7f0000000040)={0x0, 0x732e, 0x20, 0x0, 0x22d}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000300)={{0x1, 0x1, 0x18, r1}, './file0/../file0\x00'}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, &(0x7f0000000340)) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="0000009f5c1985002e2b66696c653000"]) syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_STATX={0x15, 0x9, 0x0, r4, &(0x7f0000000180), &(0x7f0000000280)='./file0\x00', 0x7ff, 0x6000, 0x1}, 0x7f) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000380)) 08:32:30 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@flag='sync'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_type}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '!$'}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsdef}, {@smackfsfloor}, {@subj_type={'subj_type', 0x3d, '[}{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$,}'}}]}}) 08:32:30 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) sendmsg$BATADV_CMD_GET_TRANSTABLE_GLOBAL(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x3f}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xe}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x60000) socketpair(0x1d, 0x3, 0x0, &(0x7f0000000000)) 08:32:30 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@flag='sync'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_type}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '!$'}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsdef}, {@smackfsfloor}, {@subj_type={'subj_type', 0x3d, '[}{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$,}'}}]}}) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020) (async) mount$fuse(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {'group_id', 0x3d, 0xee00}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x1000}}, {@max_read={'max_read', 0x3d, 0x3}}, {@default_permissions}], [{@flag='sync'}, {@func={'func', 0x3d, 'FIRMWARE_CHECK'}}, {@obj_type}, {@seclabel}, {@smackfsroot={'smackfsroot', 0x3d, '!$'}}, {@euid_eq={'euid', 0x3d, r0}}, {@smackfsdef}, {@smackfsfloor}, {@subj_type={'subj_type', 0x3d, '[}{'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$,}'}}]}}) (async) 08:32:30 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x3c667b24}}, './file0\x00'}) getsockopt$SO_J1939_ERRQUEUE(r10, 0x6b, 0x4, &(0x7f0000000800), &(0x7f0000000840)=0x4) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:30 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, 0x0, 0x0, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:30 executing program 3: clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000180)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f0000000240)={r0, r1+60000000}, &(0x7f0000000280)={[0x3]}, 0x8) socketpair(0x0, 0xe, 0x0, &(0x7f0000000000)) r2 = ioctl$UDMABUF_CREATE(0xffffffffffffffff, 0x40187542, &(0x7f0000000040)={0xffffffffffffffff, 0x1, 0xfffffffffffff000, 0x1000000000000}) clock_gettime(0x6, &(0x7f00000002c0)) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000080)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r2, @ANYBLOB="04000000000000002e2f66696c653000"]) r4 = getpgid(0x0) syz_open_procfs$userns(r4, &(0x7f0000002040)) sched_rr_get_interval(r4, &(0x7f0000000300)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_SYMLINKAT={0x26, 0x20, 0x0, r3, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00'}, 0x2) 08:32:30 executing program 0: socketpair(0x8, 0x0, 0xffff, &(0x7f0000000000)) 08:32:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:30 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000007c0)={{0x1, 0x1, 0x18, r7, {0x3c667b24}}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:30 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}, {}], 0x2, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:30 executing program 3: socketpair(0x10, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) socketpair(0x5, 0x2, 0x800, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$bt_rfcomm(r2, &(0x7f0000000080)={0x1f, @none, 0x45}, 0xa) socket$rds(0x15, 0x5, 0x0) 08:32:30 executing program 0: socketpair(0x8, 0x0, 0xffff, &(0x7f0000000000)) 08:32:30 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000000)={0x800, 0x320, 0x30, 0x1e0, 0x60, 0x10001, 0x18, 0x0, {0x800, 0x7ff}, {0x6, 0xffffffff}, {0x1, 0xfffffffc}, {0xfffffff8, 0x1013, 0x1}, 0x3, 0x2, 0x15, 0xd96d, 0x0, 0x8, 0xffffffff, 0x4, 0x1, 0x4, 0x7974, 0x4, 0x14, 0x1, 0x2}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, r0, 0x10000000) 08:32:30 executing program 2: openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, 0xffffffffffffffff, 0x10000000) 08:32:30 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) [ 1613.709242][T14949] can: request_module (can-proto-0) failed. 08:32:31 executing program 0: socketpair(0x8, 0x0, 0xffff, &(0x7f0000000000)) 08:32:31 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) (fail_nth: 1) 08:32:31 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:31 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) (fail_nth: 1) 08:32:31 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) (fail_nth: 1) 08:32:31 executing program 0: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) [ 1614.011632][T14982] FAULT_INJECTION: forcing a failure. [ 1614.011632][T14982] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.082197][T14984] FAULT_INJECTION: forcing a failure. [ 1614.082197][T14984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.117554][T14982] CPU: 1 PID: 14982 Comm: syz-executor.4 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1614.128028][T14982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1614.138114][T14982] Call Trace: [ 1614.141427][T14982] [ 1614.143778][T14990] FAULT_INJECTION: forcing a failure. [ 1614.143778][T14990] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1614.144364][T14982] dump_stack_lvl+0x125/0x1b0 [ 1614.144402][T14982] should_fail_ex+0x496/0x5b0 [ 1614.166840][T14982] _copy_to_user+0x30/0xb0 [ 1614.171301][T14982] simple_read_from_buffer+0xd0/0x150 [ 1614.176715][T14982] proc_fail_nth_read+0x1a4/0x230 [ 1614.181780][T14982] ? proc_sessionid_read+0x230/0x230 [ 1614.187122][T14982] ? security_file_permission+0xdc/0x100 [ 1614.192814][T14982] ? proc_sessionid_read+0x230/0x230 [ 1614.198154][T14982] vfs_read+0x1ce/0x930 [ 1614.202369][T14982] ? kernel_read+0x1b0/0x1b0 [ 1614.207029][T14982] ? __fget_files+0x279/0x410 [ 1614.211770][T14982] ksys_read+0x12f/0x250 [ 1614.216415][T14982] ? vfs_write+0xe40/0xe40 [ 1614.220889][T14982] ? syscall_enter_from_user_mode+0x26/0x80 [ 1614.226838][T14982] do_syscall_64+0x38/0xb0 [ 1614.231282][T14982] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.237218][T14982] RIP: 0033:0x7fc6a2a7b7cc [ 1614.241646][T14982] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1614.261373][T14982] RSP: 002b:00007fc6a37630c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1614.269823][T14982] RAX: ffffffffffffffda RBX: 00007fc6a2b9bf80 RCX: 00007fc6a2a7b7cc [ 1614.277819][T14982] RDX: 000000000000000f RSI: 00007fc6a3763130 RDI: 0000000000000004 [ 1614.285797][T14982] RBP: 00007fc6a3763120 R08: 0000000000000000 R09: 0000000010000000 [ 1614.293772][T14982] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1614.301746][T14982] R13: 000000000000000b R14: 00007fc6a2b9bf80 R15: 00007fc6a2cbfa48 [ 1614.309737][T14982] [ 1614.323133][T14990] CPU: 1 PID: 14990 Comm: syz-executor.3 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1614.333608][T14990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1614.343695][T14990] Call Trace: [ 1614.347000][T14990] [ 1614.349960][T14990] dump_stack_lvl+0x125/0x1b0 [ 1614.354681][T14990] should_fail_ex+0x496/0x5b0 [ 1614.359412][T14990] _copy_to_user+0x30/0xb0 [ 1614.363886][T14990] simple_read_from_buffer+0xd0/0x150 [ 1614.369319][T14990] proc_fail_nth_read+0x1a4/0x230 [ 1614.374397][T14990] ? proc_sessionid_read+0x230/0x230 [ 1614.379736][T14990] ? security_file_permission+0xdc/0x100 [ 1614.385427][T14990] ? proc_sessionid_read+0x230/0x230 [ 1614.390748][T14990] vfs_read+0x1ce/0x930 [ 1614.394954][T14990] ? kernel_read+0x1b0/0x1b0 [ 1614.399594][T14990] ? __fget_files+0x279/0x410 [ 1614.404332][T14990] ksys_read+0x12f/0x250 [ 1614.408634][T14990] ? vfs_write+0xe40/0xe40 [ 1614.413092][T14990] ? syscall_enter_from_user_mode+0x26/0x80 [ 1614.419032][T14990] do_syscall_64+0x38/0xb0 [ 1614.423481][T14990] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.429430][T14990] RIP: 0033:0x7f2bf727b7cc [ 1614.433876][T14990] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1614.453531][T14990] RSP: 002b:00007f2bf7ffc0c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1614.461987][T14990] RAX: ffffffffffffffda RBX: 00007f2bf739bf80 RCX: 00007f2bf727b7cc [ 1614.470004][T14990] RDX: 000000000000000f RSI: 00007f2bf7ffc130 RDI: 0000000000000004 [ 1614.478003][T14990] RBP: 00007f2bf7ffc120 R08: 0000000000000000 R09: 0000000000000000 [ 1614.486006][T14990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1614.494006][T14990] R13: 000000000000000b R14: 00007f2bf739bf80 R15: 00007f2bf74bfa48 [ 1614.502029][T14990] [ 1614.533085][T14984] CPU: 0 PID: 14984 Comm: syz-executor.2 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1614.543576][T14984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1614.553654][T14984] Call Trace: [ 1614.556943][T14984] [ 1614.559884][T14984] dump_stack_lvl+0x125/0x1b0 [ 1614.564609][T14984] should_fail_ex+0x496/0x5b0 [ 1614.569341][T14984] _copy_to_user+0x30/0xb0 [ 1614.573792][T14984] simple_read_from_buffer+0xd0/0x150 [ 1614.579210][T14984] proc_fail_nth_read+0x1a4/0x230 [ 1614.584272][T14984] ? proc_sessionid_read+0x230/0x230 [ 1614.589602][T14984] ? security_file_permission+0xdc/0x100 [ 1614.595374][T14984] ? proc_sessionid_read+0x230/0x230 [ 1614.600690][T14984] vfs_read+0x1ce/0x930 [ 1614.604892][T14984] ? kernel_read+0x1b0/0x1b0 [ 1614.609520][T14984] ? __fget_files+0x279/0x410 [ 1614.614242][T14984] ksys_read+0x12f/0x250 [ 1614.618517][T14984] ? vfs_write+0xe40/0xe40 [ 1614.622969][T14984] ? syscall_enter_from_user_mode+0x26/0x80 [ 1614.628900][T14984] do_syscall_64+0x38/0xb0 [ 1614.633326][T14984] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1614.639244][T14984] RIP: 0033:0x7fdbf7c7b7cc [ 1614.643666][T14984] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1614.663286][T14984] RSP: 002b:00007fdbf89070c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1614.671712][T14984] RAX: ffffffffffffffda RBX: 00007fdbf7d9bf80 RCX: 00007fdbf7c7b7cc 08:32:31 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:31 executing program 0: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:31 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) [ 1614.679713][T14984] RDX: 000000000000000f RSI: 00007fdbf8907130 RDI: 0000000000000004 [ 1614.687704][T14984] RBP: 00007fdbf8907120 R08: 0000000000000000 R09: 0000000010000000 [ 1614.695684][T14984] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 1614.703660][T14984] R13: 000000000000000b R14: 00007fdbf7d9bf80 R15: 00007fdbf7ebfa48 [ 1614.711737][T14984] 08:32:32 executing program 0: ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffffff, 0xc018620b, &(0x7f0000000040)={0x1}) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) (async) mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x4) openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x400200, 0x0) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) 08:32:32 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000001c0)={0x2e, r2, 0x1}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r6, 0xc018937a, &(0x7f0000000240)={{0x1, 0x1, 0x18, r7}, './file0\x00'}) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2003, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) 08:32:32 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r7, 0x0, 0x0}, 0x10) r9 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r9, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:32 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:32 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2002, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$inet6_dccp_buf(r0, 0x21, 0x9d41eddc76ebce5a, &(0x7f0000000040)=""/242, &(0x7f0000000140)=0xf2) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) sendmsg$rds(r1, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/21, 0x15}], 0x5, &(0x7f0000000900)=[@mask_fadd={0x58, 0x114, 0x8, {{0x20}, &(0x7f00000006c0)=0x444, &(0x7f0000000700)=0xce5b, 0x8000, 0x2bf, 0x6, 0xc134, 0x5f, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x8000, 0x3f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffff}, @cswp={0x58, 0x114, 0x7, {{0xffffff11, 0xc01}, &(0x7f0000000740)=0x8000000000000001, &(0x7f00000007c0)=0x80, 0xfffffffffffffff8, 0x0, 0x9, 0x10001, 0x40, 0xa73c}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x5}, &(0x7f0000000800)=0x100000001, &(0x7f0000000840)=0x800000000, 0x7, 0x8, 0x1000, 0x5, 0x10, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x4}, &(0x7f0000000880)=0x2, &(0x7f00000008c0)=0x8, 0x0, 0x9, 0x0, 0x200, 0x0, 0x4cb5}}], 0x190, 0x4010}, 0x4014) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000180)=[0x20, 0x7fff], &(0x7f00000001c0)=[0x8000, 0xffff, 0xc677, 0x40, 0x6, 0x7f, 0x0, 0x1, 0x7], &(0x7f0000000200)=[0x9, 0x7f], &(0x7f0000000240)=[0x5, 0x9, 0xe537, 0x81, 0x6]}) 08:32:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2004, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) read$fb(r0, 0x0, 0x0) 08:32:32 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880, 0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_DEL(r5, 0x2, r7) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r8, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:32 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2003, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) getsockopt$inet6_dccp_buf(r0, 0x21, 0x9d41eddc76ebce5a, &(0x7f0000000040)=""/242, &(0x7f0000000140)=0xf2) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) sendmsg$rds(r1, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/21, 0x15}], 0x5, &(0x7f0000000900)=[@mask_fadd={0x58, 0x114, 0x8, {{0x20}, &(0x7f00000006c0)=0x444, &(0x7f0000000700)=0xce5b, 0x8000, 0x2bf, 0x6, 0xc134, 0x5f, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x8000, 0x3f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffff}, @cswp={0x58, 0x114, 0x7, {{0xffffff11, 0xc01}, &(0x7f0000000740)=0x8000000000000001, &(0x7f00000007c0)=0x80, 0xfffffffffffffff8, 0x0, 0x9, 0x10001, 0x40, 0xa73c}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x5}, &(0x7f0000000800)=0x100000001, &(0x7f0000000840)=0x800000000, 0x7, 0x8, 0x1000, 0x5, 0x10, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x4}, &(0x7f0000000880)=0x2, &(0x7f00000008c0)=0x8, 0x0, 0x9, 0x0, 0x200, 0x0, 0x4cb5}}], 0x190, 0x4010}, 0x4014) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000180)=[0x20, 0x7fff], &(0x7f00000001c0)=[0x8000, 0xffff, 0xc677, 0x40, 0x6, 0x7f, 0x0, 0x1, 0x7], &(0x7f0000000200)=[0x9, 0x7f], &(0x7f0000000240)=[0x5, 0x9, 0xe537, 0x81, 0x6]}) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$inet6_dccp_buf(r0, 0x21, 0x9d41eddc76ebce5a, &(0x7f0000000040)=""/242, &(0x7f0000000140)=0xf2) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) sendmsg$rds(r1, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/21, 0x15}], 0x5, &(0x7f0000000900)=[@mask_fadd={0x58, 0x114, 0x8, {{0x20}, &(0x7f00000006c0)=0x444, &(0x7f0000000700)=0xce5b, 0x8000, 0x2bf, 0x6, 0xc134, 0x5f, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x8000, 0x3f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffff}, @cswp={0x58, 0x114, 0x7, {{0xffffff11, 0xc01}, &(0x7f0000000740)=0x8000000000000001, &(0x7f00000007c0)=0x80, 0xfffffffffffffff8, 0x0, 0x9, 0x10001, 0x40, 0xa73c}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x5}, &(0x7f0000000800)=0x100000001, &(0x7f0000000840)=0x800000000, 0x7, 0x8, 0x1000, 0x5, 0x10, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x4}, &(0x7f0000000880)=0x2, &(0x7f00000008c0)=0x8, 0x0, 0x9, 0x0, 0x200, 0x0, 0x4cb5}}], 0x190, 0x4010}, 0x4014) (async) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000180)=[0x20, 0x7fff], &(0x7f00000001c0)=[0x8000, 0xffff, 0xc677, 0x40, 0x6, 0x7f, 0x0, 0x1, 0x7], &(0x7f0000000200)=[0x9, 0x7f], &(0x7f0000000240)=[0x5, 0x9, 0xe537, 0x81, 0x6]}) (async) 08:32:32 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2005, 0x2000003, 0x11, r0, 0x10000000) 08:32:32 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) read$fb(r0, 0x0, 0x0) 08:32:33 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) ioctl$vim2m_VIDIOC_EXPBUF(r2, 0xc0405610, &(0x7f0000000440)={0x1, 0x9, 0x6, 0x4880}) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:33 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2004, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2006, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x201, 0x0) read$fb(r0, 0x0, 0x0) 08:32:33 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:33 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000), 0x0, 0xfffffeff, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:33 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) getsockopt$inet6_dccp_buf(r0, 0x21, 0x9d41eddc76ebce5a, &(0x7f0000000040)=""/242, &(0x7f0000000140)=0xf2) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) sendmsg$rds(r1, &(0x7f0000000ac0)={&(0x7f00000002c0)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000300)=""/213, 0xd5}, {&(0x7f0000000400)=""/172, 0xac}, {&(0x7f00000004c0)=""/244, 0xf4}, {&(0x7f00000005c0)}, {&(0x7f0000000600)=""/21, 0x15}], 0x5, &(0x7f0000000900)=[@mask_fadd={0x58, 0x114, 0x8, {{0x20}, &(0x7f00000006c0)=0x444, &(0x7f0000000700)=0xce5b, 0x8000, 0x2bf, 0x6, 0xc134, 0x5f, 0x6}}, @rdma_dest={0x18, 0x114, 0x2, {0x8000, 0x3f}}, @zcopy_cookie={0x18, 0x114, 0xc, 0xffff}, @cswp={0x58, 0x114, 0x7, {{0xffffff11, 0xc01}, &(0x7f0000000740)=0x8000000000000001, &(0x7f00000007c0)=0x80, 0xfffffffffffffff8, 0x0, 0x9, 0x10001, 0x40, 0xa73c}}, @mask_cswp={0x58, 0x114, 0x9, {{0x3, 0x5}, &(0x7f0000000800)=0x100000001, &(0x7f0000000840)=0x800000000, 0x7, 0x8, 0x1000, 0x5, 0x10, 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x9, 0x4}, &(0x7f0000000880)=0x2, &(0x7f00000008c0)=0x8, 0x0, 0x9, 0x0, 0x200, 0x0, 0x4cb5}}], 0x190, 0x4010}, 0x4014) (rerun: 64) ioctl$FBIOPUTCMAP(r0, 0x4605, &(0x7f0000000280)={0x0, 0x2, &(0x7f0000000180)=[0x20, 0x7fff], &(0x7f00000001c0)=[0x8000, 0xffff, 0xc677, 0x40, 0x6, 0x7f, 0x0, 0x1, 0x7], &(0x7f0000000200)=[0x9, 0x7f], &(0x7f0000000240)=[0x5, 0x9, 0xe537, 0x81, 0x6]}) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2005, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000000)) 08:32:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2007, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:33 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r6, 0x0, 0x0}, 0x10) r7 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r7, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2006, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:33 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) (async) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000000)) 08:32:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2008, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2007, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:33 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:33 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r1, 0x0, 0x0}, 0x10) (async) ioctl$FBIOGET_VSCREENINFO(r1, 0x4600, &(0x7f0000000000)) 08:32:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2009, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0x0, &(0x7f0000000040)={[0x97]}, 0x8) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2008, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r5, 0x0, 0x0}, 0x10) r6 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r6, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:33 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 08:32:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x200e, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) read$fb(r1, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2009, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) 08:32:33 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:33 executing program 0: setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000080)="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", 0x1000) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)={'stack ', '}-\\,[\x00'}, 0xc) 08:32:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x200f, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) read$fb(r1, 0x0, 0x0) (rerun: 64) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x200e, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 0: setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000080)="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", 0x1000) (async) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)={'stack ', '}-\\,[\x00'}, 0xc) 08:32:33 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x5c1000, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) read$fb(r1, 0x0, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000000)) 08:32:33 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r2, 0xc018937b, &(0x7f0000000480)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=0xee01, @ANYBLOB="2effff000000000000004692051c3e494c3f98489028b8d5ef36c6c514c8a61926c2f4c6d3ed6a70e5d993ddd6e7dd89da97056e395457559b73af37c79c9a7a7b95b447088a7431f7fa0f3ecb90c878abcfa869713179c1a552a441c237b8fe8fa901db399fe104045e0553e61039cab0bd3bfddddcee65108fee0ebc9a8f1d7efcd49d0b755b99289fda76b7056e31e6eaab220f2a43f3ab3e1f8f1c7d61913b2527a479"]) r5 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r5, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:33 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x200f, 0x2000003, 0x11, r0, 0x10000000) 08:32:33 executing program 0: setsockopt$inet6_dccp_buf(0xffffffffffffffff, 0x21, 0xd, &(0x7f0000000080)="65c361e28a484ba2c2d59815474693c7b83759a8d59894ff0abd6d61308db76482e5ad838be87e55e60e4990927c9b8fc7c1cf7bf11826b4b4632507590faa96fe3d00d11ca3d619d8d36f6ebf091ae769eb07e419aa5fce61f9c65c682c11df3dd573daf217b4568dd02e257507bf8756b256529e0b3c626559f834ef3afbb40f51b6f21b1995b1fb8dbffd348276cfef50a57d392428c5a083893d92ff9cd31195f834812462525b06430e1c3721665bc12db481768dd435e22a4eaf4015bf7a6f91e928be76cd2f7da7da6774a5fcf6b55b0bcc9b441664178f1f41b85d90fbab3eda71baa3cbcd501b97c0b044009d46c5bcd88227242f37fba47632cc2ad53a0ad8007cfb6d4a8ebad90759002603ebe44e79f00a782dfdd20489c58f73263cdfba0f4c56ddbf941e24e990b7e3e63658cbcba25b650b447b28a2e15636959a5ee59a07c1ed29a22fc12c19e50cd08948925e1c9eac8a48af1012e07d8cd12bda1a112af59e72125257bede3af7c4b8a0a0edbff31774e8668d2504ab8bbf4db0bd2e699a5b16d366367b55b58e6836c99656f88736064c80df006ddc387b77939319293b02c17ffc6bbd383a05e4f722d91c5624526563ec928064fe17884726554009e378f81716f7edfa40eeed524a886f7dbaa86aa3c7b1637b2e6ded220e9571cf724f501cbb48c2d0467c0b793b18ebc53c2757f987fea14190d329b8618cf2ab5ec80dba7eef9224d188266cfb5fbcff9d1d20fe95c7a90837096652c326576be464f134ca38b44ba0ccfc1e7c49abd10483d785dd48ab1cc130dfba1557d57f58b042796e636a02738b50a5e9a3958d83518256ccee9c381d4bcf316cd3dbaabe6081235df757a6a835c32bd3afb3a629ff5cdf7483e47642bddd713b2b896b15d926be79f90ac094724d8ec9a1d6551d4ebe3cdbbf4525ecb4cb6907e6392c125f0975ba3fe81a544524825bac3d79f79dfc87db6497cf1878db58d215f1d1adb122938962993feb54c9de9ac5607c6c48d1f04c0532e9ae4f3fa34565a1042fb5352aa0fc34d94a1dbd929f47ba999413d2d95a4d485ea4581103adbd3d4e18982e9b07a335c2a7ec95566de2027f8093ab37092d30a8e44cf8b756231e33cdcd9ac8d9fd3b4f052ebfc25e90c19c81487c80540cf011db9c783bf9ed044f9cd2d4f31c9df9ef1c5f77a476edd9fda387e83e1de595372c48c65b7ee92090facee03c2fd3489d5f2036b47fe6c3e522ec5e5427e6bce619cf72a2e5e2fc0983e9937b045e139c5a29f4363c06cee4d1211ea1e61bdb60f6290dab7463a8974347f1eefd08d92b32bc3d14fb6602d8d89da8b986cd2065a62670fe9d6dd7331869b04ede9a42d2c7dc307bf8c0d5e5e8229a8921ae6745cbaba17a9bc82ffbd7831c3826c75be777178509399c5e283b3501b609a0691012c6955026b971f69c5592ce4418868364885034dcc91461a07efc1b2e870833da3034bcabadebe5f878abc12ff7287096d19f4240c5a1d9db3770627a3c7969bcf350cd58cf6034ebd26537c916dc378de715b453e5b34177f4cb5bf1bedf89c34618d830689837c6b042662db00a66c052b5c2bb3be8bdae1bcc7503d9dc7fa6c673fadad751a74a1421288cdb315cb316eeefec91b4008d5b6e70c3b07bd4cd39e3098d12862694139b8d04511d4fec47cff64f09f02ce9c59dbddd9940f77601edaae7d610c1395ac105b0dd73c99b6a5144ae50140132754925d2c310858fa44e6ba6812beabf0fe014822b6efbb718396a1b711e4c4a96bff8f86ced479b43808cef72c8718844abbcf6f2babe553649f1fd6432689398dd6e33dce79efb3fe02349ce9bc113c211857dc7c7f488a40ece810c2a582ec968f7c761e0d6bfd674e4a7e1c9d08e1161115eaf15c4877986ef151268f447bdabbf851275808f9feac2719033cbd9a690d3fe26808775589c85ba33e819cb71e84c935d58eeb3b80a0be5da6eb58a49e4a6723f28e2ae6688d18b9b73d3efc79575347ced0df92c51e7dcf0e151d3614e8b0ebd9f983344de59f7671029ae7d51b8729a894a97b3a34ddf6f99ebfac902cd902536a018adb66d90aabc32ad97aee8ec6dc48c980e0d3727aa5a97eac5f04d84e5606bae83da8b727466fd0cddb0c72f5e8c6525c4c4aecdc40961943b84bd00d1971f03d9577bf2f24ba10f30fe3189165861e5c635e65fd5974bd244e7bc0876aeae7b2bbad8e31fb383e3ae4b3333e40c929f291eaa97b00802db4a018fbf234858ee45e0ae80060a040690c76bb1c8bf278a1dcaaca98608054ad98cf0d70b95da08e0d4c78c85f1d349d6c1be5b075a5bb7a9144832a618e09177331743bcceefc052fb4bd187b34aedfbab5ee2eca9e4d5fe33e1a0ebcf5fa554fe5e8b11b37bf40ee1a4cd903159469ebc4049ed4663de4b1c0fc2909fd6daf1e37f687c01499d4d755e88c82d4707c73e05a66da5dd668ba79044e1520647cec03ac41eca77a386fdf9c9dbabe7f35936b4fdffba2da4918d689df89afb10a76ab5194dad79adf4bb14b7bef1f32732f8615741c80d21f0833f5203b384fcd036af0efcdff3cc370ae43673d6c9c01b69b97f19fc3e53ca97615a0f097292c3c2ce5fa2e0c4abd9943a1bb5fd52989b42fafbac6ae39b6ed2d02149779349b14dbd5d6c87155ed30fc810dcee9c9d2747c0cdbfaa9019e9031d95274704965b5b3f8622fbe3ffc57896555dfe47aaf96efa7924938dc63537a32d9b58425b4f0c090ef7b0315e5bee49f309e0161c511483700092431adfd05235005b0b00d672bb67ca74bcbb7bd0d742aaa96b48c33d77ddc16bb402a8595b38f77eb890eb6db145cf505344ee5c332cb8b542cddc44f5b7b22bc3a4f46edaeaab2c7e4842e444719d97ee7183eb84cfae2249786260dd4fa298452d50419b8350aaebbc29ff89878ee1e1bad75d14ea0e35611cabb9221dd2897802d96f318f910bc18fb069ee9fdf84aac12d550ad6c00c1650438bf12deb080589708762ff2516928e1d5843cb92cb6ebdf3eac5c26ceb86c348e2d6d3b5ce6cdc94b96e9da727c1e084e450367c6d25bcd4c1e63c49ab2bb2e28e8f2493b59b0c1d6f0f465e5fda91ac892d1ec17c81d3a6e3b8a937a05ed222bbbed2ce1f3a4f290898cffc0e2af0a941eb8e05db9b23efa65cd827d4a5e2c295cdc2c1252b66d0c4037e5b8b3ae27bdb8133abb12c06fdf32ae2eb426cb33b4a4f9defb4255177d0fd1efc175a96cc3bcf066b2d20d185993b6a1c05721d04822d32b801763a8e92ae146f84fd3a5be2c95950ec3593a2aeca63b098b2b3fb2fa6f72c6c476c6267a2f63c157d2fdce57d40e74a2cffffd3390d3a78ff1ac56567ed5a0d293c4e96f30270bb1dbdbaf8a43fdb65b6f944843e21f0183dc4877faf8494a0ed5f40323dc876f0e856f9f8f1d3b3a99aa4e778f0e27370e8dc4a3e646933bac0f053361cf646bb3eee75b0ee3204586174a1588bc444b1f775d4a685da89a517f0a576040220cae9101fe0182b59e37d0d5ef21874be99ab5238690faa3896f484260c3c84202c6a013d011bf0bea424f1de6619607ca23534517654a5c73977613ea020c53b2d9ebcc04558474e20138140c1c306fe1334abab50abd098ae4800a2d8cf3cc62705498fc0e9f8a674bcf10a65d559bddacdc177d3c08ac504eeddecfee7c1e268299d21ad7476477fb036c995945bab7ee35974d19d306baaee216dd9bde43ab9c142ff0ad60585487ead28d365a125ba337f1e984846d72092063be0088fccdcd567c410063d65755ac4bd551c4bfed70c930f1c15c35c2bab7413190781ee3400994638dd43eedd7bee455d0cdc025d0b817967ded93a0ae1d1fb0357b1dbd63f15cd187118a6f7620bda6a3871eda78e32f3f6b3cefac6c012c7cd8fc09c807a303688a08b185e52c9460d49852f4bdf4c8fcd26afa559b14260edac78bf5734e1bd7e941621480d1d45f64958659900c0777f182666886f3c89d891c0152903dded97dfb1ab33d137a6ffb0f6106b09c7de5d82ab1dd2db8cb50ee331e4f8bc489df8076c3bf10bebd117e1d2044f1c65e8714b632a6dd12806c6b490730515af9443d8085d8c7c74bba944d9e9acd7c6c42d3d8f06fc820c40d7e7d42623f48f62e7f198330db335b50544b9277e8fd0966b0733a9ade2bd2c604b59617b07e9798d5cfc0e892aab484c2642faed4fc5feae263750181aca8439607d97201bc67a1ea6b93ff10326563a2547c9199ac6947d9c06b89357a33e1832af61d6fe882ae4c96778956aa78ab7af0331845dc46e9af2d345d94fa500620490406d3a54fd7e002a0706cd539aecb2f129b7cc098743581dbc3938b2944af86a234faa20a190ab720ae496ce2ea24d4f59c17c3c47fc421847a0b8f844e383d1227b6c47c9fa4d405041c3b9f2cf6f60d41a2c0dbef19ecea6b253498cf1dc1c00a20bddab40b899843dee12e9cacdb2a3a8b1c0ff401471b6a68c1e4c8ae60a01eef66786ae25e403c3ed8d721530a5aff3e46b622271b79d21eaa0339dc72621511cb17d0ae14eb35ae3ab53c0bbf6d744d47bbb16bec8a7fdaa9885063160fbbc2f4ed0d5b3ac80cfc5439eeadb8537cba0395ec2657edad1f73f075ec9f1239f805fd79bbb027c135715f85b6330866e690ea440a82593240a7ec092399e38311da3fd4cdee0b1c1c794030c3e07ed4cefb3bbdb573b35e9d8c957f19d8dc769cd9a21f95bff151f44131cccbbe611b2829e16555fa538cbf65d9bbe62e9cfd3f1b2c4e7875a769a6afe068e68b31c01c8fc15efaaf399028324a79f482fb709fcea8c5308bf16b3d09840d54942b60163825dc3671f22f47a78eb7a8ae2dca7869e57dff1c0a588dd331efd80f6760bb6d5c4095942b6df50a39b5646159d6b3c8164698eada8a90dbbb71470cb753eb60422c86e0bbb8482ea7207502ffcecf469bf931e1c5423716642c9df1a0dd382f47c0d64b9a802dc051a85bf01a92b5b0220505b988b8e06ad454b17f16fb36f16cadfce65af5ed0837544b4c5ac8e57e29c013db6afbecf52cae7d4348b87f61c5124842ff9cb8c4cce638ad627081369d26294972c39102f037c3867a6622f6117beff14926dc2832b4f7c1cbc103aad82dfbcd73ba37281154bc1946e2d98604db6bacd33c63f6b600a1ea9215655c57a151ab2f967551e10599171e78412832de571c4f94f6564e238406d926021041208357204b8c3a91b38cae4a358e3cd9b99f739615d812216a2cea272e3537fd01249aa84799843730bb71b2fca79fb7302373460fcf39aad9430706e801c6145db62f349aa976bb43fbaf4d7adacf4a9d405d5c2e142bdf028d4e109033a09a2a1f1687d96904e1b4a2b6ef58d97bd249108f9ba762e3a4a0d7139428b64ed21ab2e81bf930a2343313a8b09800912f95ac9e4b359575458fb48d0f0bbd6c7f105d004ffbf0f2a36a9e9c1a2c741722c37e06f682378178dcc6d5c0627c207fdd2c07b27e982bbde8f80028a251edfed2b0550fc452133134fe9fac58bd096ac2c976b8efb5a43779f110cf6110a11a1d2504f9bd230ac0faee659dab41e347d89e486e33e6382319e1e521f14fe375971ae6d3dfa165e677e219ab8950ba7b423f36ed3cc5b87b07f55eaa43ae0696f7a05e3ac089e40e2bb3a6f242bb5054e7cc24ee730943370f7d7e671d1037924adfa84e7c32382e53f22969b5d4c04d39b94aa5ea01560ba701f4bedc0d9ff12fce3a847cd3a2ba5", 0x1000) (async, rerun: 32) write$apparmor_exec(0xffffffffffffffff, &(0x7f0000000040)={'stack ', '}-\\,[\x00'}, 0xc) (rerun: 32) 08:32:34 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xcd) epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x7) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@generic={0x26, "93c3baa1d1e186139969b8fdb0d0dcf22803287ed7984c6175d3afd77e720d8911ec485faa09463acbbb90a174d16665dd40c7e045d11ad90c757fb4fdcf6c112d5053854ffab96cbcf91ff843d3cfb5b2cc6b293850158b55966fb9679693c0d86b2b443b407d4c1c66b935823bbbad2fee828fd9a25cd81630f7db4295"}, {&(0x7f0000000040)}, &(0x7f0000000080), 0x40}, 0xa0) 08:32:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000180)=[0x1, 0x8, 0x11eb, 0x3ff, 0x826a, 0x3, 0xff, 0x2]) syz_open_dev$video(&(0x7f0000000140), 0xad2, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) 08:32:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x7fdbf7dc0fff, 0x2000003, 0x11, r0, 0x10000000) 08:32:34 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="2e30db70dfe3447170a294451a01346866ae00"]) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x5c1000, 0x2000003, 0x11, r0, 0x10000000) 08:32:34 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) (fail_nth: 1) 08:32:34 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xcd) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x7) (async) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@generic={0x26, "93c3baa1d1e186139969b8fdb0d0dcf22803287ed7984c6175d3afd77e720d8911ec485faa09463acbbb90a174d16665dd40c7e045d11ad90c757fb4fdcf6c112d5053854ffab96cbcf91ff843d3cfb5b2cc6b293850158b55966fb9679693c0d86b2b443b407d4c1c66b935823bbbad2fee828fd9a25cd81630f7db4295"}, {&(0x7f0000000040)}, &(0x7f0000000080), 0x40}, 0xa0) 08:32:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0x2000003, 0x11, r0, 0x10000000) 08:32:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000180)=[0x1, 0x8, 0x11eb, 0x3ff, 0x826a, 0x3, 0xff, 0x2]) syz_open_dev$video(&(0x7f0000000140), 0xad2, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) 08:32:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x7fc6a2bc0fff, 0x2000003, 0x11, r0, 0x10000000) 08:32:34 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_FD(r3, 0xc01064c2, &(0x7f0000000040)={0x0, 0x0, r2}) r4 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r4, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:34 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x7ffffffff000, 0x2000003, 0x11, r0, 0x10000000) 08:32:34 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000180)=[0x1, 0x8, 0x11eb, 0x3ff, 0x826a, 0x3, 0xff, 0x2]) (async) syz_open_dev$video(&(0x7f0000000140), 0xad2, 0x40) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x20000801) 08:32:34 executing program 0: epoll_wait(0xffffffffffffffff, &(0x7f00000001c0)=[{}, {}, {}, {}], 0x4, 0xcd) (async) epoll_wait(0xffffffffffffffff, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x7) socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f00000000c0)={@generic={0x26, "93c3baa1d1e186139969b8fdb0d0dcf22803287ed7984c6175d3afd77e720d8911ec485faa09463acbbb90a174d16665dd40c7e045d11ad90c757fb4fdcf6c112d5053854ffab96cbcf91ff843d3cfb5b2cc6b293850158b55966fb9679693c0d86b2b443b407d4c1c66b935823bbbad2fee828fd9a25cd81630f7db4295"}, {&(0x7f0000000040)}, &(0x7f0000000080), 0x40}, 0xa0) 08:32:34 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x10000000) 08:32:34 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r2, 0xc0189375, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r0, @ANYBLOB="00000000000000002e2f66696c65300002aed0d171e435514f6e4ef5af5d516474b7b6062df7b5292b7b6709da14688f9e29bb3c1f1e4211543948cd8505760bd454e90157eca065158f6c3abedddd260b9a8a018fe962ba8626d40a4050180b0afaa62ed7fdfad05868729e858e1eb75eca7b7cbbcd8700bfe210aa82495839ac8f6f9a22cae708563e9e0b095b4cda4b2d096bd801b383dca19f27f4873f2c9dd02cf611d911c5a660b0c03874576f7939682246f302e81376b2c5c1ab4c1b1ac7f0722ca52a0eade362aae2a07b7a88d1ccee7c"]) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:35 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) write$fb(0xffffffffffffffff, &(0x7f0000000000)="b208bc930b6fe41e140d7e1d35293fb4fdee4ba9448e67466ee87c97fdb42e37567a", 0x22) 08:32:35 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) 08:32:35 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x4, 0x11, r0, 0x10000000) 08:32:35 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:35 executing program 0: socketpair(0x11, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) 08:32:35 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) (async, rerun: 32) write$fb(0xffffffffffffffff, &(0x7f0000000000)="b208bc930b6fe41e140d7e1d35293fb4fdee4ba9448e67466ee87c97fdb42e37567a", 0x22) (rerun: 32) 08:32:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r0, 0x10000000) 08:32:35 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x10000000) 08:32:35 executing program 0: socketpair(0x11, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) socket$inet6_sctp(0xa, 0x5, 0x84) socketpair(0x11, 0x0, 0x400, &(0x7f0000000000)) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) 08:32:35 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x3e9, 0x100, 0x70bd28, 0x25dfdbfc, {0x38, 0x1, 0x1, 0x0, 0x80000001, 0x7, 0x1, 0x3, 0x0, 0x7fff, 0x20}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x4048001}, 0x4010) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:35 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) read$fb(r0, 0x0, 0x0) (async, rerun: 64) write$fb(0xffffffffffffffff, &(0x7f0000000000)="b208bc930b6fe41e140d7e1d35293fb4fdee4ba9448e67466ee87c97fdb42e37567a", 0x22) (rerun: 64) 08:32:35 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x11, r0, 0x10000000) 08:32:35 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:36 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x300, 0xfffffeff, 0x0, 0x0) 08:32:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fscache_volume\x00', r1}, 0x10) read$fb(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000000100), 0x2}, 0xa0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x81}}, './file0\x00'}) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x10, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x4010000) 08:32:36 executing program 0: socketpair(0x11, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040), 0x4) (async) socket$inet6_sctp(0xa, 0x5, 0x84) 08:32:36 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x11, r0, 0x10000000) 08:32:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000008, 0x11, r0, 0x10000000) 08:32:36 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:36 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) socket$inet_sctp(0x2, 0x16faf6a4e65a0571, 0x84) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:36 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fscache_volume\x00', r1}, 0x10) (async) read$fb(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000000100), 0x2}, 0xa0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x81}}, './file0\x00'}) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x10, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x4010000) 08:32:36 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff3089}}, './file0\x00'}) 08:32:36 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000009, 0x11, r0, 0x10000000) 08:32:36 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r0, 0x10000000) 08:32:36 executing program 1: sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x10, 0x3f6, 0x800, 0x70bd28, 0x25dfdbfc, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20008084}, 0x48000) r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:37 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x8) 08:32:37 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fscache_volume\x00', r1}, 0x10) (async) read$fb(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, &(0x7f0000000080)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x9}}, './file0\x00'}) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000140)={@ax25={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x8}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, {&(0x7f00000007c0)=""/4096, 0x1000}, &(0x7f0000000100), 0x2}, 0xa0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000200)={{0x1, 0x1, 0x18, r2, {0x81}}, './file0\x00'}) sendmsg$AUDIT_TRIM(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x10, 0x3f6, 0x10, 0x70bd2a, 0x25dfdbfb, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4001}, 0x4010000) 08:32:37 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000a, 0x11, r0, 0x10000000) 08:32:37 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) (async) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) (async, rerun: 64) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff3089}}, './file0\x00'}) (rerun: 64) 08:32:37 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x11, r0, 0x10000000) 08:32:37 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:37 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:37 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x11, r0, 0x10000000) 08:32:37 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x10000000) 08:32:37 executing program 0: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff3089}}, './file0\x00'}) 08:32:37 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./5\x00\x00(kv']) read$fb(r0, 0x0, 0x0) 08:32:37 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000f, 0x11, r0, 0x10000000) 08:32:38 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x8000000) 08:32:38 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000010, 0x11, r0, 0x10000000) 08:32:38 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000010, 0x11, r0, 0x10000000) 08:32:38 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./5\x00\x00(kv']) read$fb(r0, 0x0, 0x0) 08:32:38 executing program 0: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x200000e, 0x11, r0, 0x10000000) 08:32:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x1000000) 08:32:38 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x1000000) 08:32:38 executing program 3: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./5\x00\x00(kv']) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=0xffffffffffffffff, @ANYRES32=0xee01, @ANYRES32=0xee00, @ANYBLOB='./5\x00\x00(kv']) read$fb(r0, 0x0, 0x0) 08:32:38 executing program 0: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x300, 0xfffffeff, 0x0, 0x0) 08:32:38 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x103000, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:38 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x2000000) 08:32:39 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0xaaaaaa9) 08:32:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) read$fb(r0, 0x0, 0x0) 08:32:39 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:39 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x2000000) 08:32:39 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x3000000) 08:32:39 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x4000000) 08:32:39 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) read$fb(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) (async) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) read$fb(r0, 0x0, 0x0) (async) 08:32:39 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) read$fb(r0, 0x0, 0x0) 08:32:39 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:39 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x3000000) 08:32:39 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:39 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x4000000) 08:32:40 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0xa9aaaa0a) 08:32:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) read$fb(r0, 0x0, 0x0) 08:32:40 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (async) read$fb(r0, 0x0, 0x0) 08:32:40 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x5000000) 08:32:40 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x5000000) 08:32:40 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f00000002c0)={0x2, 0xffffffffffffffff, 0x2}) 08:32:40 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e1301, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xe82503, 0x0) read$fb(r0, 0x0, 0x0) 08:32:40 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x6000000) 08:32:40 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:40 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x6000000) 08:32:40 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) read$fb(r0, 0x0, 0x0) 08:32:40 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:41 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x800000000000000) 08:32:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e1301, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xe82503, 0x0) read$fb(r0, 0x0, 0x0) 08:32:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x7000000) 08:32:41 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x7000000) 08:32:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:41 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:41 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x2}) 08:32:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x8000000) 08:32:41 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:41 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x8000000) 08:32:41 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e1301, 0x0) (async) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x40840, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0xe82503, 0x0) (async, rerun: 32) read$fb(r0, 0x0, 0x0) (rerun: 32) 08:32:41 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x9000000) 08:32:42 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0xa9aaaa0a00000000) 08:32:42 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)) 08:32:42 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x9000000) 08:32:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2d6503, 0x0) read$fb(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)={0x208, 0x0, 0x0, [{{0x1, 0x0, 0xff, 0x7f, 0x80, 0x5801, {0x3, 0x10001, 0x4, 0x20, 0x8, 0x2, 0x0, 0xffffff7f, 0x20, 0x2000, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x1}}, {0x1, 0x8000000000000001, 0x9, 0x80, '/dev/fb0\x00'}}, {{0x5, 0x3, 0xfffffffffffffff8, 0xff, 0x8, 0x9, {0x5, 0x400000000, 0x7f, 0x4, 0x4000000, 0x4, 0x7, 0x6, 0xfff, 0x4000, 0x2, 0xee00, 0xee01, 0x40, 0x9}}, {0x1, 0x1, 0x9, 0x80c7, '/dev/fb0\x00'}}, {{0x3, 0x3, 0x7fff, 0x2, 0x6, 0x1, {0x6, 0x7, 0x80, 0x9c53, 0x1, 0xffffffff, 0x7, 0x2, 0x7fff, 0xc000, 0x2, r1, 0xee01, 0x42}}, {0x0, 0x10001, 0x9, 0x9, '/dev/fb0\x00'}}]}, 0x208) 08:32:42 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xa000000) 08:32:42 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xa000000) 08:32:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2d6503, 0x0) read$fb(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)={0x208, 0x0, 0x0, [{{0x1, 0x0, 0xff, 0x7f, 0x80, 0x5801, {0x3, 0x10001, 0x4, 0x20, 0x8, 0x2, 0x0, 0xffffff7f, 0x20, 0x2000, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x1}}, {0x1, 0x8000000000000001, 0x9, 0x80, '/dev/fb0\x00'}}, {{0x5, 0x3, 0xfffffffffffffff8, 0xff, 0x8, 0x9, {0x5, 0x400000000, 0x7f, 0x4, 0x4000000, 0x4, 0x7, 0x6, 0xfff, 0x4000, 0x2, 0xee00, 0xee01, 0x40, 0x9}}, {0x1, 0x1, 0x9, 0x80c7, '/dev/fb0\x00'}}, {{0x3, 0x3, 0x7fff, 0x2, 0x6, 0x1, {0x6, 0x7, 0x80, 0x9c53, 0x1, 0xffffffff, 0x7, 0x2, 0x7fff, 0xc000, 0x2, r1, 0xee01, 0x42}}, {0x0, 0x10001, 0x9, 0x9, '/dev/fb0\x00'}}]}, 0x208) 08:32:42 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xb000000) 08:32:42 executing program 0: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) write$fb(r0, &(0x7f0000000100)="fda57230c8ce1616f4339eca4a7eed810767c7eb1ba8baedc1241a06b4eb6514e1f2308b54fabd8222bf374da0a1e3ce5c4726a8a3d70de0e7f89769406064e765ab25a888aca3de0770db95612b7431ec1be90dde44b41b81e40b28948b537afda52e3c78fb0d519145dc537ae75c6bfe576157a8073413c6dd3058c9b885d0373d45bb73a54c5964fc3835d3d8d0a15b2e055a92e568bdf3dfd963bb72d391100c16910e7b966f15c171252a412e0018a35571d04dc87e16079d4a7b8d0c4d31df4e84cdbd0d25ee7c68bc553a01e33edb6b68add7ad9c6b42cea3b4888f4854a109f66f62b58c36", 0xe9) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:42 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, &(0x7f00000002c0)={0x0, 0xffffffffffffffff, 0x2}) 08:32:42 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2d6503, 0x0) read$fb(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)={0x208, 0x0, 0x0, [{{0x1, 0x0, 0xff, 0x7f, 0x80, 0x5801, {0x3, 0x10001, 0x4, 0x20, 0x8, 0x2, 0x0, 0xffffff7f, 0x20, 0x2000, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x1}}, {0x1, 0x8000000000000001, 0x9, 0x80, '/dev/fb0\x00'}}, {{0x5, 0x3, 0xfffffffffffffff8, 0xff, 0x8, 0x9, {0x5, 0x400000000, 0x7f, 0x4, 0x4000000, 0x4, 0x7, 0x6, 0xfff, 0x4000, 0x2, 0xee00, 0xee01, 0x40, 0x9}}, {0x1, 0x1, 0x9, 0x80c7, '/dev/fb0\x00'}}, {{0x3, 0x3, 0x7fff, 0x2, 0x6, 0x1, {0x6, 0x7, 0x80, 0x9c53, 0x1, 0xffffffff, 0x7, 0x2, 0x7fff, 0xc000, 0x2, r1, 0xee01, 0x42}}, {0x0, 0x10001, 0x9, 0x9, '/dev/fb0\x00'}}]}, 0x208) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x2d6503, 0x0) (async) read$fb(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xffffffffffffffff, 0xee00}}, './file0\x00'}) (async) write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f0000000080)={0x208, 0x0, 0x0, [{{0x1, 0x0, 0xff, 0x7f, 0x80, 0x5801, {0x3, 0x10001, 0x4, 0x20, 0x8, 0x2, 0x0, 0xffffff7f, 0x20, 0x2000, 0x9, 0xffffffffffffffff, 0x0, 0x9, 0x1}}, {0x1, 0x8000000000000001, 0x9, 0x80, '/dev/fb0\x00'}}, {{0x5, 0x3, 0xfffffffffffffff8, 0xff, 0x8, 0x9, {0x5, 0x400000000, 0x7f, 0x4, 0x4000000, 0x4, 0x7, 0x6, 0xfff, 0x4000, 0x2, 0xee00, 0xee01, 0x40, 0x9}}, {0x1, 0x1, 0x9, 0x80c7, '/dev/fb0\x00'}}, {{0x3, 0x3, 0x7fff, 0x2, 0x6, 0x1, {0x6, 0x7, 0x80, 0x9c53, 0x1, 0xffffffff, 0x7, 0x2, 0x7fff, 0xc000, 0x2, r1, 0xee01, 0x42}}, {0x0, 0x10001, 0x9, 0x9, '/dev/fb0\x00'}}]}, 0x208) (async) 08:32:43 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x2, 0x70bd25, 0x25dfdbff, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004090}, 0x1000) 08:32:43 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:43 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xb000000) 08:32:43 executing program 0: openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x200401, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:43 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xc000000) 08:32:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) read$fb(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2dc}}, './file0\x00'}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x440d0}, 0x40804) 08:32:43 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xd000000) 08:32:43 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) read$fb(r0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2dc}}, './file0\x00'}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x440d0}, 0x40804) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) (async) read$fb(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2dc}}, './file0\x00'}) (async) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x440d0}, 0x40804) (async) 08:32:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:43 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:43 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xc000000) 08:32:43 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:44 executing program 5: epoll_create1(0x0) (async) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x2, 0x70bd25, 0x25dfdbff, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004090}, 0x1000) 08:32:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xe000000) 08:32:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:44 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x101, 0x0) read$fb(r0, 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(0xffffffffffffffff, 0xc0189372, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2dc}}, './file0\x00'}) sendmsg$AUDIT_TTY_GET(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f8, 0x0, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x440d0}, 0x40804) 08:32:44 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xd000000) 08:32:44 executing program 1: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 08:32:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xf000000) 08:32:44 executing program 1: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 08:32:44 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1975120580a4"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x74b}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x4004004) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) read$fb(r0, 0x0, 0x0) 08:32:44 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xe000000) 08:32:44 executing program 1: ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 08:32:44 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000002) 08:32:45 executing program 5: epoll_create1(0x0) (async) r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)=ANY=[@ANYBLOB="030000000000000018000000", @ANYRES32=0xffffffffffffffff, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$AUDIT_TTY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x18, 0x3f9, 0x2, 0x70bd25, 0x25dfdbff, {0x1}, ["", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x24004090}, 0x1000) 08:32:45 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0xf000000) 08:32:45 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1975120580a4"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x74b}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x4004004) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) read$fb(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0/file0\x00'}) (async) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1975120580a4"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x74b}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x4004004) (async) openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) (async) read$fb(r0, 0x0, 0x0) (async) 08:32:45 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000003) 08:32:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:45 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000002) 08:32:45 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000004) 08:32:45 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1975120580a4"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x74b}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x4004004) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) (async) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) read$fb(r0, 0x0, 0x0) 08:32:45 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) 08:32:45 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000005) 08:32:46 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 08:32:46 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000003) 08:32:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000006) 08:32:46 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x30800, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x8, 0xfffffff8, 0x3, 0x82000}) read$fb(r0, 0x0, 0x0) 08:32:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:46 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2, 0x1, 0x4}, 0xff}, 0x18) 08:32:46 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000004) 08:32:46 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 08:32:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000007) 08:32:46 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x30800, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x8, 0xfffffff8, 0x3, 0x82000}) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x8, 0xfffffff8, 0x3, 0x82000}) read$fb(r0, 0x0, 0x0) 08:32:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000008) 08:32:46 executing program 1: openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, 0x0) 08:32:46 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000005) 08:32:46 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x30800, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x8, 0xfffffff8, 0x3, 0x82000}) read$fb(r0, 0x0, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x30800, 0x0) (async) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000000)={0x8, 0xfffffff8, 0x3, 0x82000}) (async) read$fb(r0, 0x0, 0x0) (async) 08:32:46 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000006) 08:32:46 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000009) 08:32:46 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:47 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) (async) syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2, 0x1, 0x4}, 0xff}, 0x18) (rerun: 64) 08:32:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) read$fb(r0, 0x0, 0x0) 08:32:47 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000002) 08:32:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x1000000e) 08:32:47 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000007) 08:32:47 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:47 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000008) 08:32:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(r1, 0xc018937b, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff}}, './file0/file0\x00'}) sendmsg$BATADV_CMD_SET_VLAN(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x0, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @random="1975120580a4"}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x1000}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x9}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x40}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x74b}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x8004}, 0x4004004) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(r3, 0xc0189371, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000000)) read$fb(r0, 0x0, 0x0) 08:32:47 executing program 0: socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) 08:32:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) read$fb(r0, 0x0, 0x0) 08:32:47 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) (async) syz_open_dev$cec(&(0x7f0000000040), 0x3, 0x2) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, 0x0, 0x2, {0x2, 0x1, 0x4}, 0xff}, 0x18) 08:32:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x1000000f) 08:32:47 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000009) 08:32:47 executing program 1: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) read$fb(r0, 0x0, 0x0) 08:32:47 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) read$fb(r0, 0x0, 0x0) 08:32:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 08:32:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000300) 08:32:47 executing program 1: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x1000000f) 08:32:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 08:32:47 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x1000000e) 08:32:47 executing program 3: read$fb(0xffffffffffffffff, 0x0, 0xffffffffffffffeb) syz_io_uring_setup(0x26f3, &(0x7f0000000000)={0x0, 0x7d2e, 0x4, 0x2, 0x3bb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) syz_io_uring_submit(r0, 0x0, &(0x7f0000001b80)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=@llc={0x1a, 0x302, 0x81, 0x2, 0x5, 0xa4, @random="fb54de11fc0a"}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="7850cbd77da9f7e5fd4fb2d192cab8331b5815c33400adafbad01cbbc858c9aa7b2d169dca7049fbb41daa8918312908ddfb5be3b9de84870cabb828fe5c919e0e6fa7baea7c223e9823637d392f6298c6e477ad8ee007ab1e6c7d6ec34d595d98ae5f61e06d78d5c2723333ab2e13f141f2190f4058c36d11be39fc64bba7073b47d7fef6dd04b1dc09e61359fd373a5cab4f48e40fc95b4142eb8bc6e452faf7a69dca58d74f0e631f860b141287b92ec89be591e703be5a88fb054730e575516110767d8f373dc017b08bf04695d9696b3976746fdecb16facd9dc819637409189d61b6ab24d418868aa64ffeebd423beb6b93a", 0xf5}, {&(0x7f0000000280)="f6de8e6ead0a44f770caa816f5874f66f86a28ae1ed714cc4b00a36e3eaaed47e1e194cd80", 0x25}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="b452f06b17a18b7179fd8dc09cf816353b73655c9cb7920ae143d28435d005fedd8169ff01d87d7ce578081bf55f5db131b81c848be2efcbc83c7a770d60a0e3452fe6ba35636f603f069febf027f48ae01fc91fd571c06b675f0246eeea596bbd6fcc9b5ff3f0bab79be3827049e41c563fdc103ff84fd42009ccf889b1c47912d3ce352d58db9a799b3957fc1849991c7dd74060cf26f944ff8e47dcc8f8dcfeedff35b9c0b21b71cebe1b954a08a8", 0xb0}, {&(0x7f00000003c0)="7851d5389fa7f53516a6362b3c9996ea54407a75632e3d1e30fe8112f90a1b3f410df5ccb365772eb96060bb43bb9fed40b367646622ab65acfb7418f293d6f4183186734cc5a2931b3b169b48621400fff6ef88d05cf34bb764906a9aa5a0201057d7dd035e851207e70c42cc394a4fdb7c4ed64f8986baf311643da9f3d9d64710fde3b21c7df6fd93462b352edbaf0282da95c05d92f5ad936575631845dd967506802b2997cf4a661e3d91555169c4d4f21c49849889", 0xb8}, {&(0x7f0000000480)="453c259bf454a80aab18b8142c8191e0f19f07d3611ba9625bcc0d4f6b64bf6d297207f3db7a539ad64a5ec7f596efab78aa7a8af6ad02d30259a472128089cee2071d56b16c4677f9ae802d75c656dc22079f1e7769545bbb4bf9a52c707351857321a860459683660129128f1827a51fdd52e16b4ea52d7cd8c878fee7e728fca0d5a2a3ab9b3b636aad5290dafe5c858f6f230d31d84937ff3c0c386c84a65011bcd1f3cb16f1bd25997657bfc07d2dcb5050c5f428dd6183525c70e62ba6c3fc07885975d25add45fd93cbb264db0d549e7a283c407b2591d0f392c24894e99973d8c8f7e3646f62", 0xea}, {&(0x7f0000000580)="f63894162ab608b0f4380178f929b6586c437d547905bbae057c66fdfe8d561dbeda29e823be8e9af62c26879191c12f22e1ee9123572358edfe982d240988c778c55f516ea1eeae11dec3fa1551fdb2e6bde3", 0x53}], 0x7, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x14c0}, 0x0, 0x64}, 0x2) 08:32:47 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000500) 08:32:48 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) syz_io_uring_setup(0x6a2c, &(0x7f0000000040)={0x0, 0x5da7, 0x4, 0x3, 0x1d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0xfe0000, 0x3, 0x1}, 0x6) 08:32:48 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x1000000f) 08:32:48 executing program 1: socketpair(0xa, 0x0, 0x400, &(0x7f0000000000)) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x5, 0xffff3089}}, './file0\x00'}) 08:32:48 executing program 3: read$fb(0xffffffffffffffff, 0x0, 0xffffffffffffffeb) (async) syz_io_uring_setup(0x26f3, &(0x7f0000000000)={0x0, 0x7d2e, 0x4, 0x2, 0x3bb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000001b80)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=@llc={0x1a, 0x302, 0x81, 0x2, 0x5, 0xa4, @random="fb54de11fc0a"}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="7850cbd77da9f7e5fd4fb2d192cab8331b5815c33400adafbad01cbbc858c9aa7b2d169dca7049fbb41daa8918312908ddfb5be3b9de84870cabb828fe5c919e0e6fa7baea7c223e9823637d392f6298c6e477ad8ee007ab1e6c7d6ec34d595d98ae5f61e06d78d5c2723333ab2e13f141f2190f4058c36d11be39fc64bba7073b47d7fef6dd04b1dc09e61359fd373a5cab4f48e40fc95b4142eb8bc6e452faf7a69dca58d74f0e631f860b141287b92ec89be591e703be5a88fb054730e575516110767d8f373dc017b08bf04695d9696b3976746fdecb16facd9dc819637409189d61b6ab24d418868aa64ffeebd423beb6b93a", 0xf5}, {&(0x7f0000000280)="f6de8e6ead0a44f770caa816f5874f66f86a28ae1ed714cc4b00a36e3eaaed47e1e194cd80", 0x25}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="b452f06b17a18b7179fd8dc09cf816353b73655c9cb7920ae143d28435d005fedd8169ff01d87d7ce578081bf55f5db131b81c848be2efcbc83c7a770d60a0e3452fe6ba35636f603f069febf027f48ae01fc91fd571c06b675f0246eeea596bbd6fcc9b5ff3f0bab79be3827049e41c563fdc103ff84fd42009ccf889b1c47912d3ce352d58db9a799b3957fc1849991c7dd74060cf26f944ff8e47dcc8f8dcfeedff35b9c0b21b71cebe1b954a08a8", 0xb0}, {&(0x7f00000003c0)="7851d5389fa7f53516a6362b3c9996ea54407a75632e3d1e30fe8112f90a1b3f410df5ccb365772eb96060bb43bb9fed40b367646622ab65acfb7418f293d6f4183186734cc5a2931b3b169b48621400fff6ef88d05cf34bb764906a9aa5a0201057d7dd035e851207e70c42cc394a4fdb7c4ed64f8986baf311643da9f3d9d64710fde3b21c7df6fd93462b352edbaf0282da95c05d92f5ad936575631845dd967506802b2997cf4a661e3d91555169c4d4f21c49849889", 0xb8}, {&(0x7f0000000480)="453c259bf454a80aab18b8142c8191e0f19f07d3611ba9625bcc0d4f6b64bf6d297207f3db7a539ad64a5ec7f596efab78aa7a8af6ad02d30259a472128089cee2071d56b16c4677f9ae802d75c656dc22079f1e7769545bbb4bf9a52c707351857321a860459683660129128f1827a51fdd52e16b4ea52d7cd8c878fee7e728fca0d5a2a3ab9b3b636aad5290dafe5c858f6f230d31d84937ff3c0c386c84a65011bcd1f3cb16f1bd25997657bfc07d2dcb5050c5f428dd6183525c70e62ba6c3fc07885975d25add45fd93cbb264db0d549e7a283c407b2591d0f392c24894e99973d8c8f7e3646f62", 0xea}, {&(0x7f0000000580)="f63894162ab608b0f4380178f929b6586c437d547905bbae057c66fdfe8d561dbeda29e823be8e9af62c26879191c12f22e1ee9123572358edfe982d240988c778c55f516ea1eeae11dec3fa1551fdb2e6bde3", 0x53}], 0x7, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x14c0}, 0x0, 0x64}, 0x2) 08:32:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, 0x0) 08:32:48 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000600) 08:32:48 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000300) 08:32:48 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (fail_nth: 1) 08:32:48 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000700) 08:32:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (fail_nth: 1) 08:32:48 executing program 3: read$fb(0xffffffffffffffff, 0x0, 0xffffffffffffffeb) (async, rerun: 64) syz_io_uring_setup(0x26f3, &(0x7f0000000000)={0x0, 0x7d2e, 0x4, 0x2, 0x3bb}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)) (async, rerun: 64) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) syz_io_uring_submit(r0, 0x0, &(0x7f0000001b80)=@IORING_OP_SENDMSG={0x9, 0x10, 0x0, r1, 0x0, &(0x7f0000001b40)={&(0x7f0000000100)=@llc={0x1a, 0x302, 0x81, 0x2, 0x5, 0xa4, @random="fb54de11fc0a"}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000180)="7850cbd77da9f7e5fd4fb2d192cab8331b5815c33400adafbad01cbbc858c9aa7b2d169dca7049fbb41daa8918312908ddfb5be3b9de84870cabb828fe5c919e0e6fa7baea7c223e9823637d392f6298c6e477ad8ee007ab1e6c7d6ec34d595d98ae5f61e06d78d5c2723333ab2e13f141f2190f4058c36d11be39fc64bba7073b47d7fef6dd04b1dc09e61359fd373a5cab4f48e40fc95b4142eb8bc6e452faf7a69dca58d74f0e631f860b141287b92ec89be591e703be5a88fb054730e575516110767d8f373dc017b08bf04695d9696b3976746fdecb16facd9dc819637409189d61b6ab24d418868aa64ffeebd423beb6b93a", 0xf5}, {&(0x7f0000000280)="f6de8e6ead0a44f770caa816f5874f66f86a28ae1ed714cc4b00a36e3eaaed47e1e194cd80", 0x25}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="b452f06b17a18b7179fd8dc09cf816353b73655c9cb7920ae143d28435d005fedd8169ff01d87d7ce578081bf55f5db131b81c848be2efcbc83c7a770d60a0e3452fe6ba35636f603f069febf027f48ae01fc91fd571c06b675f0246eeea596bbd6fcc9b5ff3f0bab79be3827049e41c563fdc103ff84fd42009ccf889b1c47912d3ce352d58db9a799b3957fc1849991c7dd74060cf26f944ff8e47dcc8f8dcfeedff35b9c0b21b71cebe1b954a08a8", 0xb0}, {&(0x7f00000003c0)="7851d5389fa7f53516a6362b3c9996ea54407a75632e3d1e30fe8112f90a1b3f410df5ccb365772eb96060bb43bb9fed40b367646622ab65acfb7418f293d6f4183186734cc5a2931b3b169b48621400fff6ef88d05cf34bb764906a9aa5a0201057d7dd035e851207e70c42cc394a4fdb7c4ed64f8986baf311643da9f3d9d64710fde3b21c7df6fd93462b352edbaf0282da95c05d92f5ad936575631845dd967506802b2997cf4a661e3d91555169c4d4f21c49849889", 0xb8}, {&(0x7f0000000480)="453c259bf454a80aab18b8142c8191e0f19f07d3611ba9625bcc0d4f6b64bf6d297207f3db7a539ad64a5ec7f596efab78aa7a8af6ad02d30259a472128089cee2071d56b16c4677f9ae802d75c656dc22079f1e7769545bbb4bf9a52c707351857321a860459683660129128f1827a51fdd52e16b4ea52d7cd8c878fee7e728fca0d5a2a3ab9b3b636aad5290dafe5c858f6f230d31d84937ff3c0c386c84a65011bcd1f3cb16f1bd25997657bfc07d2dcb5050c5f428dd6183525c70e62ba6c3fc07885975d25add45fd93cbb264db0d549e7a283c407b2591d0f392c24894e99973d8c8f7e3646f62", 0xea}, {&(0x7f0000000580)="f63894162ab608b0f4380178f929b6586c437d547905bbae057c66fdfe8d561dbeda29e823be8e9af62c26879191c12f22e1ee9123572358edfe982d240988c778c55f516ea1eeae11dec3fa1551fdb2e6bde3", 0x53}], 0x7, &(0x7f0000001bc0)=ANY=[@ANYBLOB="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"], 0x14c0}, 0x0, 0x64}, 0x2) 08:32:48 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000500) [ 1631.081357][T15597] FAULT_INJECTION: forcing a failure. [ 1631.081357][T15597] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.083266][T15594] FAULT_INJECTION: forcing a failure. [ 1631.083266][T15594] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.137755][T15597] CPU: 0 PID: 15597 Comm: syz-executor.1 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1631.148227][T15597] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1631.158398][T15597] Call Trace: [ 1631.161727][T15597] [ 1631.164693][T15597] dump_stack_lvl+0x125/0x1b0 [ 1631.169415][T15597] should_fail_ex+0x496/0x5b0 [ 1631.174139][T15597] should_failslab+0x9/0x20 [ 1631.178714][T15597] __kmem_cache_alloc_node+0x2fd/0x350 [ 1631.184559][T15597] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1631.190341][T15597] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1631.196113][T15597] __kmalloc+0x4c/0x100 [ 1631.200312][T15597] tomoyo_realpath_from_path+0xb9/0x710 [ 1631.205907][T15597] ? tomoyo_profile+0x47/0x60 [ 1631.210629][T15597] tomoyo_path_number_perm+0x243/0x590 [ 1631.216135][T15597] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1631.221807][T15597] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1631.227778][T15597] ? reacquire_held_locks+0x4b0/0x4b0 [ 1631.233194][T15597] ? bit_wait_timeout+0x160/0x160 [ 1631.238273][T15597] ? __fget_files+0x279/0x410 [ 1631.243003][T15597] security_file_ioctl+0x72/0xb0 [ 1631.247986][T15597] __x64_sys_ioctl+0xbb/0x210 [ 1631.252710][T15597] do_syscall_64+0x38/0xb0 [ 1631.257159][T15597] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1631.263099][T15597] RIP: 0033:0x7fdfea87cb29 [ 1631.267543][T15597] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1631.287178][T15597] RSP: 002b:00007fdfeb54c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.296054][T15597] RAX: ffffffffffffffda RBX: 00007fdfea99bf80 RCX: 00007fdfea87cb29 [ 1631.304068][T15597] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 1631.312076][T15597] RBP: 00007fdfeb54c120 R08: 0000000000000000 R09: 0000000000000000 [ 1631.320077][T15597] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.328081][T15597] R13: 000000000000000b R14: 00007fdfea99bf80 R15: 00007fdfeaabfa48 [ 1631.336099][T15597] [ 1631.369526][T15594] CPU: 1 PID: 15594 Comm: syz-executor.0 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1631.378986][T15597] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1631.379972][T15594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1631.379988][T15594] Call Trace: [ 1631.379995][T15594] [ 1631.380004][T15594] dump_stack_lvl+0x125/0x1b0 [ 1631.407771][T15594] should_fail_ex+0x496/0x5b0 [ 1631.412501][T15594] should_failslab+0x9/0x20 [ 1631.417135][T15594] __kmem_cache_alloc_node+0x2fd/0x350 [ 1631.422630][T15594] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1631.428395][T15594] ? tomoyo_realpath_from_path+0xb9/0x710 [ 1631.434156][T15594] __kmalloc+0x4c/0x100 [ 1631.438355][T15594] tomoyo_realpath_from_path+0xb9/0x710 [ 1631.443951][T15594] ? tomoyo_profile+0x47/0x60 [ 1631.448681][T15594] tomoyo_path_number_perm+0x243/0x590 [ 1631.454193][T15594] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1631.459882][T15594] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1631.465764][T15594] ? reacquire_held_locks+0x4b0/0x4b0 [ 1631.471169][T15594] ? bit_wait_timeout+0x160/0x160 [ 1631.476243][T15594] ? __fget_files+0x279/0x410 [ 1631.480964][T15594] security_file_ioctl+0x72/0xb0 [ 1631.485950][T15594] __x64_sys_ioctl+0xbb/0x210 [ 1631.490668][T15594] do_syscall_64+0x38/0xb0 [ 1631.495117][T15594] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1631.501061][T15594] RIP: 0033:0x7f8238a7cb29 [ 1631.505501][T15594] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1631.525146][T15594] RSP: 002b:00007f82375fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1631.533607][T15594] RAX: ffffffffffffffda RBX: 00007f8238b9bf80 RCX: 00007f8238a7cb29 [ 1631.541612][T15594] RDX: 0000000020000000 RSI: 0000000000008933 RDI: 0000000000000003 [ 1631.549611][T15594] RBP: 00007f82375fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1631.557623][T15594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1631.565624][T15594] R13: 000000000000000b R14: 00007f8238b9bf80 R15: 00007f8238cbfa48 [ 1631.573647][T15594] [ 1631.650502][T15594] ERROR: Out of memory at tomoyo_realpath_from_path. 08:32:49 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) syz_io_uring_setup(0x6a2c, &(0x7f0000000040)={0x0, 0x5da7, 0x4, 0x3, 0x1d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0xfe0000, 0x3, 0x1}, 0x6) epoll_create1(0x0) (async) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) (async) syz_io_uring_setup(0x6a2c, &(0x7f0000000040)={0x0, 0x5da7, 0x4, 0x3, 0x1d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) (async) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0xfe0000, 0x3, 0x1}, 0x6) (async) 08:32:49 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000900) 08:32:49 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000600) 08:32:49 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$FBIOBLANK(r2, 0x4611, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x8010, 0x2}) 08:32:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (fail_nth: 2) 08:32:49 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (fail_nth: 2) 08:32:49 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000e00) 08:32:49 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) read$fb(r0, 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) (async) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) ioctl$FBIOBLANK(r2, 0x4611, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x8010, 0x2}) (async) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x8010, 0x2}) [ 1631.881126][T15615] FAULT_INJECTION: forcing a failure. [ 1631.881126][T15615] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.905430][T15614] FAULT_INJECTION: forcing a failure. [ 1631.905430][T15614] name failslab, interval 1, probability 0, space 0, times 0 [ 1631.940011][T15614] CPU: 1 PID: 15614 Comm: syz-executor.1 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1631.950491][T15614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1631.960575][T15614] Call Trace: [ 1631.963880][T15614] [ 1631.966844][T15614] dump_stack_lvl+0x125/0x1b0 [ 1631.971592][T15614] should_fail_ex+0x496/0x5b0 [ 1631.976347][T15614] should_failslab+0x9/0x20 [ 1631.980908][T15614] __kmem_cache_alloc_node+0x2fd/0x350 [ 1631.986406][T15614] ? tomoyo_encode2+0x100/0x3d0 [ 1631.991313][T15614] ? tomoyo_encode2+0x100/0x3d0 [ 1631.996220][T15614] __kmalloc+0x4c/0x100 [ 1632.000833][T15614] tomoyo_encode2+0x100/0x3d0 [ 1632.005565][T15614] ? rcu_is_watching+0x12/0xb0 [ 1632.010382][T15614] tomoyo_encode+0x29/0x50 [ 1632.014845][T15614] tomoyo_realpath_from_path+0x196/0x710 [ 1632.020520][T15614] tomoyo_path_number_perm+0x243/0x590 [ 1632.026099][T15614] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1632.031775][T15614] ? tomoyo_execute_permission+0x4a0/0x4a0 08:32:49 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x400840, 0x0) read$fb(r0, 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) ioctl$FBIOBLANK(r2, 0x4611, 0x7) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async, rerun: 64) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000040)={0x8010, 0x2}) (rerun: 64) [ 1632.037651][T15614] ? reacquire_held_locks+0x4b0/0x4b0 [ 1632.043062][T15614] ? bit_wait_timeout+0x160/0x160 [ 1632.048142][T15614] ? __fget_files+0x279/0x410 [ 1632.052872][T15614] security_file_ioctl+0x72/0xb0 [ 1632.057854][T15614] __x64_sys_ioctl+0xbb/0x210 [ 1632.062584][T15614] do_syscall_64+0x38/0xb0 [ 1632.067043][T15614] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1632.072981][T15614] RIP: 0033:0x7fdfea87cb29 [ 1632.077422][T15614] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1632.097060][T15614] RSP: 002b:00007fdfeb54c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.105513][T15614] RAX: ffffffffffffffda RBX: 00007fdfea99bf80 RCX: 00007fdfea87cb29 [ 1632.113599][T15614] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 1632.121600][T15614] RBP: 00007fdfeb54c120 R08: 0000000000000000 R09: 0000000000000000 [ 1632.129684][T15614] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:32:49 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000700) 08:32:49 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000900) [ 1632.137685][T15614] R13: 000000000000000b R14: 00007fdfea99bf80 R15: 00007fdfeaabfa48 [ 1632.145876][T15614] 08:32:49 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000f00) 08:32:49 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) (async) syz_io_uring_setup(0x6a2c, &(0x7f0000000040)={0x0, 0x5da7, 0x4, 0x3, 0x1d1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000140)=@IORING_OP_FADVISE={0x18, 0x2, 0x0, @fd_index=0x4, 0xffffffffffffffff, 0x0, 0xfe0000, 0x3, 0x1}, 0x6) 08:32:49 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000e00) 08:32:49 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f00000006c0)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000640), 0x20080, 0x0) read$fb(r0, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) [ 1632.303551][T15615] CPU: 1 PID: 15615 Comm: syz-executor.0 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1632.314112][T15615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1632.324198][T15615] Call Trace: [ 1632.327496][T15615] [ 1632.330449][T15615] dump_stack_lvl+0x125/0x1b0 [ 1632.335162][T15615] should_fail_ex+0x496/0x5b0 [ 1632.339889][T15615] should_failslab+0x9/0x20 [ 1632.344439][T15615] __kmem_cache_alloc_node+0x2fd/0x350 [ 1632.349935][T15615] ? tomoyo_encode2+0x100/0x3d0 [ 1632.354836][T15615] ? tomoyo_encode2+0x100/0x3d0 [ 1632.359733][T15615] __kmalloc+0x4c/0x100 [ 1632.364020][T15615] tomoyo_encode2+0x100/0x3d0 [ 1632.368736][T15615] tomoyo_encode+0x29/0x50 [ 1632.373193][T15615] tomoyo_realpath_from_path+0x196/0x710 [ 1632.378872][T15615] ? tomoyo_profile+0x47/0x60 [ 1632.383598][T15615] tomoyo_path_number_perm+0x243/0x590 [ 1632.389098][T15615] ? tomoyo_path_number_perm+0x1eb/0x590 [ 1632.394788][T15615] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1632.400677][T15615] ? reacquire_held_locks+0x4b0/0x4b0 [ 1632.406101][T15615] ? bit_wait_timeout+0x160/0x160 [ 1632.411183][T15615] ? __fget_files+0x279/0x410 [ 1632.415906][T15615] security_file_ioctl+0x72/0xb0 [ 1632.420888][T15615] __x64_sys_ioctl+0xbb/0x210 [ 1632.425602][T15615] do_syscall_64+0x38/0xb0 [ 1632.430028][T15615] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1632.435939][T15615] RIP: 0033:0x7f8238a7cb29 [ 1632.440361][T15615] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1632.460062][T15615] RSP: 002b:00007f82375fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.468483][T15615] RAX: ffffffffffffffda RBX: 00007f8238b9bf80 RCX: 00007f8238a7cb29 [ 1632.476507][T15615] RDX: 0000000020000000 RSI: 0000000000008933 RDI: 0000000000000003 [ 1632.484495][T15615] RBP: 00007f82375fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1632.492488][T15615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 08:32:49 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6f, 0x40}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) [ 1632.500468][T15615] R13: 000000000000000b R14: 00007f8238b9bf80 R15: 00007f8238cbfa48 [ 1632.508466][T15615] [ 1632.539400][T15614] ERROR: Out of memory at tomoyo_realpath_from_path. 08:32:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (fail_nth: 3) 08:32:49 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000f00) 08:32:49 executing program 3: r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$FBIOGET_VSCREENINFO(r0, 0x4600, &(0x7f00000006c0)) openat$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000000680), 0x2, 0x0) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000640), 0x20080, 0x0) read$fb(r0, 0x0, 0x0) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000100)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000140), &(0x7f0000000180), 0x8, 0x10, 0x8, 0x8, &(0x7f00000001c0)}}, 0x10) ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x6, &(0x7f0000000380)=[0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0x10, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) (rerun: 32) 08:32:49 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6f, 0x40}}, './file0\x00'}) (async, rerun: 64) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) (rerun: 64) 08:32:49 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (fail_nth: 3) [ 1632.591352][T15615] ERROR: Out of memory at tomoyo_realpath_from_path. 08:32:49 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) io_uring_setup(0x5e5d, &(0x7f0000000040)={0x0, 0x4faa, 0x20, 0x0, 0xc9, 0x0, r0}) [ 1632.695211][T15651] FAULT_INJECTION: forcing a failure. [ 1632.695211][T15651] name fail_usercopy, interval 1, probability 0, space 0, times 0 08:32:50 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r1, 0x0, 0x0}, 0x10) (async) ioctl$AUTOFS_DEV_IOCTL_FAIL(r1, 0xc0189377, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x6f, 0x40}}, './file0\x00'}) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) [ 1632.774279][T15658] FAULT_INJECTION: forcing a failure. [ 1632.774279][T15658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1632.789995][T15651] CPU: 0 PID: 15651 Comm: syz-executor.1 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1632.800464][T15651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1632.810551][T15651] Call Trace: [ 1632.813849][T15651] [ 1632.816785][T15651] dump_stack_lvl+0x125/0x1b0 [ 1632.821473][T15651] should_fail_ex+0x496/0x5b0 [ 1632.826167][T15651] _copy_from_user+0x30/0xf0 [ 1632.830772][T15651] dma_heap_ioctl+0x54f/0x690 [ 1632.835506][T15651] ? bit_wait_timeout+0x160/0x160 [ 1632.840547][T15651] ? dma_heap_open+0x110/0x110 [ 1632.845360][T15651] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1632.850327][T15651] ? dma_heap_open+0x110/0x110 [ 1632.855136][T15651] __x64_sys_ioctl+0x18f/0x210 [ 1632.859933][T15651] do_syscall_64+0x38/0xb0 [ 1632.864367][T15651] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1632.870284][T15651] RIP: 0033:0x7fdfea87cb29 [ 1632.874705][T15651] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1632.894418][T15651] RSP: 002b:00007fdfeb54c0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1632.902847][T15651] RAX: ffffffffffffffda RBX: 00007fdfea99bf80 RCX: 00007fdfea87cb29 [ 1632.910908][T15651] RDX: 0000000000000000 RSI: 00000000c0184800 RDI: 0000000000000003 [ 1632.918880][T15651] RBP: 00007fdfeb54c120 R08: 0000000000000000 R09: 0000000000000000 [ 1632.926874][T15651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1632.934865][T15651] R13: 000000000000000b R14: 00007fdfea99bf80 R15: 00007fdfeaabfa48 [ 1632.942864][T15651] [ 1632.946197][ C0] vkms_vblank_simulate: vblank timer overrun [ 1632.947022][T15646] ------------[ cut here ]------------ [ 1632.958551][T15646] platform vkms: vblank wait timed out on crtc 0 [ 1632.989430][T15658] CPU: 0 PID: 15658 Comm: syz-executor.0 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1632.999900][T15658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1633.009983][T15658] Call Trace: [ 1633.012924][T15646] WARNING: CPU: 1 PID: 15646 at drivers/gpu/drm/drm_vblank.c:1310 drm_wait_one_vblank+0x32d/0x540 [ 1633.013264][T15658] [ 1633.024027][T15646] Modules linked in: [ 1633.026847][T15658] dump_stack_lvl+0x125/0x1b0 [ 1633.026883][T15658] should_fail_ex+0x496/0x5b0 [ 1633.030740][T15646] [ 1633.030750][T15646] CPU: 1 PID: 15646 Comm: syz-executor.3 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1633.035403][T15658] _copy_from_user+0x30/0xf0 [ 1633.035432][T15658] get_user_ifreq+0xf3/0x250 [ 1633.035462][T15658] sock_do_ioctl+0x1ca/0x290 [ 1633.035487][T15658] ? get_user_ifreq+0x250/0x250 [ 1633.035508][T15658] ? do_vfs_ioctl+0x379/0x1910 [ 1633.035539][T15658] ? vfs_fileattr_set+0xbf0/0xbf0 [ 1633.040200][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1633.042524][T15658] sock_ioctl+0x205/0x6e0 [ 1633.042553][T15658] ? br_ioctl_call+0xb0/0xb0 [ 1633.042583][T15658] ? __fget_files+0x279/0x410 [ 1633.042616][T15658] ? bpf_lsm_file_ioctl+0x9/0x10 [ 1633.053638][T15646] RIP: 0010:drm_wait_one_vblank+0x32d/0x540 [ 1633.057564][T15658] ? br_ioctl_call+0xb0/0xb0 [ 1633.062141][T15646] Code: 4d 85 ed 0f 84 49 01 00 00 e8 5f 76 d4 fc 4c 89 e7 e8 d7 e6 78 00 89 e9 4c 89 ea 48 c7 c7 40 cd dc 8a 48 89 c6 e8 f3 3f 9b fc <0f> 0b e9 16 fe ff ff e8 37 76 d4 fc 48 8d 7b 08 48 b8 00 00 00 00 [ 1633.066716][T15658] __x64_sys_ioctl+0x18f/0x210 [ 1633.066756][T15658] do_syscall_64+0x38/0xb0 [ 1633.066780][T15658] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1633.066815][T15658] RIP: 0033:0x7f8238a7cb29 [ 1633.066834][T15658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1633.066854][T15658] RSP: 002b:00007f82375fe0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 08:32:50 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xfffffffffffffee8, 0x0}, 0x6e23ebc7ce7b81ab) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="030000007172709e0000000008653000"]) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000000)={{0x4, 0x6}, 0x56}, 0x10) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) 08:32:50 executing program 5: r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000000)=[{}], 0x1, 0xfffffeff, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000080)={0x24}) 08:32:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_1\x00'}) (fail_nth: 4) 08:32:50 executing program 1: r0 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r0, 0xc0184800, 0x0) (fail_nth: 4) [ 1633.066891][T15658] RAX: ffffffffffffffda RBX: 00007f8238b9bf80 RCX: 00007f8238a7cb29 [ 1633.066908][T15658] RDX: 0000000020000000 RSI: 0000000000008933 RDI: 0000000000000003 [ 1633.066924][T15658] RBP: 00007f82375fe120 R08: 0000000000000000 R09: 0000000000000000 [ 1633.066939][T15658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.066954][T15658] R13: 000000000000000b R14: 00007f8238b9bf80 R15: 00007f8238cbfa48 [ 1633.066986][T15658] [ 1633.067131][ C0] vkms_vblank_simulate: vblank timer overrun 08:32:50 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) io_uring_setup(0x5e5d, &(0x7f0000000040)={0x0, 0x4faa, 0x20, 0x0, 0xc9, 0x0, r0}) [ 1633.071850][T15646] RSP: 0018:ffffc9000323fb38 EFLAGS: 00010286 [ 1633.245581][T15646] RAX: 0000000000000000 RBX: ffff88801f22c000 RCX: 0000000000000000 [ 1633.253647][T15646] RDX: ffff88807effbb80 RSI: ffffffff814d3c06 RDI: 0000000000000001 [ 1633.262343][T15646] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1633.272608][T15646] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801f6ab010 [ 1633.280622][T15646] R13: ffff88801f62c230 R14: 1ffff92000647f69 R15: 0000000000001282 [ 1633.288826][T15646] FS: 00007f2bf7ffc6c0(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000 [ 1633.289957][T15668] FAULT_INJECTION: forcing a failure. [ 1633.289957][T15668] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.297838][T15646] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1633.297861][T15646] CR2: 00007fdbf7d980d0 CR3: 0000000050e66000 CR4: 00000000003506e0 [ 1633.297876][T15646] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1633.297890][T15646] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1633.297905][T15646] Call Trace: [ 1633.297914][T15646] [ 1633.297931][T15646] ? __warn+0xe6/0x380 [ 1633.297962][T15646] ? preempt_schedule_notrace+0x5f/0xe0 [ 1633.297993][T15646] ? drm_wait_one_vblank+0x32d/0x540 [ 1633.298026][T15646] ? report_bug+0x3bc/0x580 [ 1633.349003][T15672] FAULT_INJECTION: forcing a failure. [ 1633.349003][T15672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1633.352179][T15646] ? handle_bug+0x3c/0x70 [ 1633.352258][T15646] ? exc_invalid_op+0x17/0x40 [ 1633.352282][T15646] ? asm_exc_invalid_op+0x1a/0x20 [ 1633.352317][T15646] ? __warn_printk+0x1a6/0x350 [ 1633.352346][T15646] ? drm_wait_one_vblank+0x32d/0x540 [ 1633.352377][T15646] ? drm_wait_one_vblank+0x32d/0x540 [ 1633.352406][T15646] ? drm_crtc_vblank_put+0x80/0x80 [ 1633.381835][T15672] CPU: 0 PID: 15672 Comm: syz-executor.1 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1633.385983][T15646] ? mark_held_locks+0x9f/0xe0 [ 1633.390573][T15672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1633.395890][T15646] ? prepare_to_swait_exclusive+0x240/0x240 [ 1633.400577][T15672] Call Trace: [ 1633.400589][T15672] [ 1633.405896][T15646] ? lockdep_hardirqs_on+0x7d/0x100 [ 1633.411098][T15672] dump_stack_lvl+0x125/0x1b0 [ 1633.416223][T15646] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 1633.426575][T15672] should_fail_ex+0x496/0x5b0 [ 1633.426612][T15672] _copy_to_user+0x30/0xb0 [ 1633.426639][T15672] simple_read_from_buffer+0xd0/0x150 [ 1633.431384][T15646] ? drm_vblank_get+0x14f/0x270 [ 1633.441427][T15672] proc_fail_nth_read+0x1a4/0x230 [ 1633.441461][T15672] ? proc_sessionid_read+0x230/0x230 [ 1633.441485][T15672] ? security_file_permission+0xdc/0x100 [ 1633.447434][T15646] drm_fb_helper_ioctl+0x152/0x190 [ 1633.450641][T15672] ? proc_sessionid_read+0x230/0x230 [ 1633.453587][T15646] ? drm_fb_helper_unregister_info+0x60/0x60 [ 1633.458722][T15672] vfs_read+0x1ce/0x930 [ 1633.464013][T15646] do_fb_ioctl+0x3d0/0x7d0 [ 1633.469162][T15672] ? kernel_read+0x1b0/0x1b0 [ 1633.474060][T15646] ? fb_getput_cmap+0x2f0/0x2f0 [ 1633.478241][T15672] ? __fget_files+0x279/0x410 [ 1633.483746][T15646] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1633.488509][T15672] ksys_read+0x12f/0x250 [ 1633.493562][T15646] ? do_vfs_ioctl+0x379/0x1910 [ 1633.498757][T15672] ? vfs_write+0xe40/0xe40 [ 1633.505070][T15646] ? __fget_files+0x279/0x410 [ 1633.510063][T15672] ? syscall_enter_from_user_mode+0x26/0x80 [ 1633.515359][T15646] fb_ioctl+0xf1/0x160 [ 1633.521277][T15672] do_syscall_64+0x38/0xb0 [ 1633.525449][T15646] ? do_fb_ioctl+0x7d0/0x7d0 08:32:50 executing program 2: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) (async) r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r2, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r2, 0xfffffffffffffee8, 0x0}, 0x6e23ebc7ce7b81ab) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r0, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYBLOB="030000007172709e0000000008653000"]) (async) r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r3, 0x0, 0x0}, 0x10) (async) setsockopt$RDS_FREE_MR(r3, 0x114, 0x3, &(0x7f0000000000)={{0x4, 0x6}, 0x56}, 0x10) (async) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r4, 0x0, 0x0}, 0x10) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x6, 0x11, r1, 0x10000000) 08:32:50 executing program 4: r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000003, 0x11, r0, 0x10000000) io_uring_setup(0x5e5d, &(0x7f0000000040)={0x0, 0x4faa, 0x20, 0x0, 0xc9, 0x0, r0}) [ 1633.529797][T15672] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1633.534397][T15646] __x64_sys_ioctl+0x18f/0x210 [ 1633.539186][T15672] RIP: 0033:0x7fdfea87b7cc [ 1633.543925][T15646] do_syscall_64+0x38/0xb0 [ 1633.549614][T15672] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 1633.553869][T15646] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1633.558575][T15672] RSP: 002b:00007fdfeb54c0c0 EFLAGS: 00000246 [ 1633.563117][T15646] RIP: 0033:0x7f2bf727cb29 [ 1633.567715][T15672] ORIG_RAX: 0000000000000000 [ 1633.567729][T15672] RAX: ffffffffffffffda RBX: 00007fdfea99bf80 RCX: 00007fdfea87b7cc [ 1633.567745][T15672] RDX: 000000000000000f RSI: 00007fdfeb54c130 RDI: 0000000000000004 [ 1633.567758][T15672] RBP: 00007fdfeb54c120 R08: 0000000000000000 R09: 0000000000000000 [ 1633.567771][T15672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1633.567786][T15672] R13: 000000000000000b R14: 00007fdfea99bf80 R15: 00007fdfeaabfa48 [ 1633.567816][T15672] [ 1633.567950][ C0] vkms_vblank_simulate: vblank timer overrun [ 1633.699427][T15646] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1633.719368][T15646] RSP: 002b:00007f2bf7ffc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1633.727868][T15646] RAX: ffffffffffffffda RBX: 00007f2bf739bf80 RCX: 00007f2bf727cb29 [ 1633.735950][T15646] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 1633.744091][T15646] RBP: 00007f2bf72c847a R08: 0000000000000000 R09: 0000000000000000 [ 1633.752184][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1633.760321][T15646] R13: 000000000000000b R14: 00007f2bf739bf80 R15: 00007f2bf74bfa48 [ 1633.769335][T15646] [ 1633.772601][T15646] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1633.779909][T15646] CPU: 1 PID: 15646 Comm: syz-executor.3 Not tainted 6.5.0-rc2-syzkaller-00322-g725d444db6b0 #0 [ 1633.790519][T15646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2023 [ 1633.800664][T15646] Call Trace: [ 1633.803945][T15646] [ 1633.806874][T15646] dump_stack_lvl+0xd9/0x1b0 [ 1633.811474][T15646] panic+0x6a4/0x750 [ 1633.815414][T15646] ? panic_smp_self_stop+0xa0/0xa0 [ 1633.820535][T15646] ? show_trace_log_lvl+0x29d/0x3c0 [ 1633.825752][T15646] ? drm_wait_one_vblank+0x32d/0x540 [ 1633.831040][T15646] check_panic_on_warn+0xab/0xb0 [ 1633.835983][T15646] __warn+0xf2/0x380 [ 1633.839881][T15646] ? preempt_schedule_notrace+0x5f/0xe0 [ 1633.845428][T15646] ? drm_wait_one_vblank+0x32d/0x540 [ 1633.851162][T15646] report_bug+0x3bc/0x580 [ 1633.855510][T15646] handle_bug+0x3c/0x70 [ 1633.859667][T15646] exc_invalid_op+0x17/0x40 [ 1633.864255][T15646] asm_exc_invalid_op+0x1a/0x20 [ 1633.869119][T15646] RIP: 0010:drm_wait_one_vblank+0x32d/0x540 [ 1633.875021][T15646] Code: 4d 85 ed 0f 84 49 01 00 00 e8 5f 76 d4 fc 4c 89 e7 e8 d7 e6 78 00 89 e9 4c 89 ea 48 c7 c7 40 cd dc 8a 48 89 c6 e8 f3 3f 9b fc <0f> 0b e9 16 fe ff ff e8 37 76 d4 fc 48 8d 7b 08 48 b8 00 00 00 00 [ 1633.894727][T15646] RSP: 0018:ffffc9000323fb38 EFLAGS: 00010286 [ 1633.900882][T15646] RAX: 0000000000000000 RBX: ffff88801f22c000 RCX: 0000000000000000 [ 1633.908854][T15646] RDX: ffff88807effbb80 RSI: ffffffff814d3c06 RDI: 0000000000000001 [ 1633.916825][T15646] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 1633.924804][T15646] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88801f6ab010 [ 1633.932778][T15646] R13: ffff88801f62c230 R14: 1ffff92000647f69 R15: 0000000000001282 [ 1633.940759][T15646] ? __warn_printk+0x1a6/0x350 [ 1633.945535][T15646] ? drm_wait_one_vblank+0x32d/0x540 [ 1633.950916][T15646] ? drm_crtc_vblank_put+0x80/0x80 [ 1633.956034][T15646] ? mark_held_locks+0x9f/0xe0 [ 1633.960802][T15646] ? prepare_to_swait_exclusive+0x240/0x240 [ 1633.966717][T15646] ? lockdep_hardirqs_on+0x7d/0x100 [ 1633.971920][T15646] ? _raw_spin_unlock_irqrestore+0x3b/0x70 [ 1633.977749][T15646] ? drm_vblank_get+0x14f/0x270 [ 1633.982617][T15646] drm_fb_helper_ioctl+0x152/0x190 [ 1633.987738][T15646] ? drm_fb_helper_unregister_info+0x60/0x60 [ 1633.993729][T15646] do_fb_ioctl+0x3d0/0x7d0 [ 1633.998153][T15646] ? fb_getput_cmap+0x2f0/0x2f0 [ 1634.003009][T15646] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 1634.008842][T15646] ? do_vfs_ioctl+0x379/0x1910 [ 1634.013644][T15646] ? __fget_files+0x279/0x410 [ 1634.018333][T15646] fb_ioctl+0xf1/0x160 [ 1634.022408][T15646] ? do_fb_ioctl+0x7d0/0x7d0 [ 1634.027002][T15646] __x64_sys_ioctl+0x18f/0x210 [ 1634.031804][T15646] do_syscall_64+0x38/0xb0 [ 1634.036224][T15646] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 1634.042138][T15646] RIP: 0033:0x7f2bf727cb29 [ 1634.046555][T15646] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1634.066168][T15646] RSP: 002b:00007f2bf7ffc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1634.074671][T15646] RAX: ffffffffffffffda RBX: 00007f2bf739bf80 RCX: 00007f2bf727cb29 [ 1634.082646][T15646] RDX: 0000000000000000 RSI: 0000000040044620 RDI: 0000000000000004 [ 1634.090621][T15646] RBP: 00007f2bf72c847a R08: 0000000000000000 R09: 0000000000000000 [ 1634.098590][T15646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1634.106562][T15646] R13: 000000000000000b R14: 00007f2bf739bf80 R15: 00007f2bf74bfa48 [ 1634.114551][T15646] [ 1634.117654][T15646] Kernel Offset: disabled [ 1634.122099][T15646] Rebooting in 86400 seconds..