000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:43 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48)

17:38:43 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:43 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:43 executing program 2:
capset(&(0x7f0000000040)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000080)={0xfff, 0x1000, 0x80, 0x7, 0x3, 0x3ff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x200002, 0x0)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))

17:38:43 executing program 4:
capset(&(0x7f0000000000)={0x19980330}, 0x0)

17:38:43 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x20080522, r2}, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x4008090)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 3:
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
write$vhost_msg(r0, &(0x7f0000000240)={0x1, {0x0, 0x0, 0x0}}, 0x48)

17:38:44 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x3, 0xfffffff7, 0x800], 0x3, 0x1800, 0x0, <r0=>0xffffffffffffffff})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/251)

17:38:44 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x20080522, r2}, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r4, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x4008090)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r0 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x20080522, r2}, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 4:
r0 = getpid()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))
getpgrp(r0)
capset(&(0x7f0000000000)={0x20080522, r0}, 0x0)

17:38:44 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 3:
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x68a00, 0x0)
semctl$IPC_STAT(0x0, 0x0, 0x2, &(0x7f0000000100)=""/192)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x20080522, r2}, 0x0)
r3 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r3, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000000040))

17:38:44 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x7ff, 0x2, 0x6, 0x0, 0x0, 0x401})
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:44 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 3:
r0 = getpid()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))
getpgrp(r0)
capset(&(0x7f0000000000)={0x20080522, r0}, 0x0)

17:38:44 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x20080522, r2}, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 3:
r0 = getpid()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))
getpgrp(r0)
capset(&(0x7f0000000000)={0x20080522, r0}, 0x0)

17:38:44 executing program 2:
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x3, 0x3, 0x3, 0x3cf4, 0x818, 0x1, 0xfffffffb, [], 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x4}, 0x40)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000240)=@bpf_lsm={0x1d, 0x4, &(0x7f0000000080)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x6}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x8, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x401}], &(0x7f00000000c0)='GPL\x00', 0x854, 0x8f, &(0x7f0000000100)=""/143, 0x41100, 0x2, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0xb, 0x7, 0xb2}, 0x10}, 0x78)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)

17:38:44 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}}, 0x4)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:44 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x20080522, r2}, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 5:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 3:
r0 = getpid()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))
getpgrp(r0)
capset(&(0x7f0000000000)={0x20080522, r0}, 0x0)

17:38:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0)

17:38:44 executing program 4:
getpid()
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
r2 = getpgid(r0)
capset(&(0x7f0000000000)={0x20080522, r2}, 0x0)

17:38:44 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x5)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x20080522, r2}, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 3:
r0 = getpid()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))
getpgrp(r0)

17:38:44 executing program 5:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0xff2, 0x4)

17:38:44 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x4, 0x2ac141)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040))

17:38:44 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
getpgrp(0xffffffffffffffff)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 3:
getpid()
timer_create(0x1, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:44 executing program 5:
syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)=ANY=[@ANYBLOB="01150200aaaaaaaaaaaabbbbbb9bbbbb"])
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 3:
timer_create(0x1, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:44 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}}, 0x4)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:44 executing program 0:
socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)

17:38:44 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r2, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$SIOCPNDELRESOURCE(0xffffffffffffffff, 0x89ef, &(0x7f0000000180)=0xfffffffa)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080))
syz_open_dev$vivid(&(0x7f00000001c0)='/dev/video#\x00', 0x0, 0x2)
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000100)={0x2, &(0x7f00000000c0)=[{0x2, 0x1, 0x40}, {0x7, 0x2, 0x9, 0xffffffb8}]})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.net/syz0\x00', 0x200002, 0x0)

17:38:44 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}}, 0x4)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:44 executing program 0:
socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  277.995083] binder: 3985:3994 ioctl c0306201 0 returned -14
17:38:44 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000180))

17:38:44 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}}, 0x4)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:44 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)

17:38:44 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth0_virt_wifi\x00'})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r1, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:44 executing program 0:
socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, &(0x7f0000000040)=0x7, 0x4)

[  278.085778] binder: 4000:4007 ioctl c0306201 0 returned -14
17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:38:45 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000180))

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}}, 0x4)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:45 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)

17:38:45 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x6, 0x1})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20010801}, 0x4000000)

17:38:45 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

[  278.225161] binder: 4015:4022 ioctl c0306201 0 returned -14
17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)

17:38:45 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000180))

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00', 0xffffffffffffffff)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x80000, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)

17:38:45 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

17:38:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:45 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 0:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f0000000040), 0x4)

17:38:45 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wg1\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:45 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x80000, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
write$FUSE_OPEN(r1, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wg1\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

17:38:45 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = gettid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x845}, 0x20000000)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x54851)

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r1}, &(0x7f00000005c0))
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={&(0x7f0000000040)="1fed4ce71826beba8376be249b975813b981c01d0f0722acef7cf3bc47646411665e8e30adf2c613c11ce000f908c09651c104149dd7f8e672207f8412eefdb2576f4f17bdeb1ad289431b10e0b7bf9438da6f2588adca1ac0a32de5c6c955c5bd137d8ba5e11e512c960a345124ac93fda9051c3d3f82a1203bb13abc39d08927372cba125c689e14cf6c029882ce0397ae188c6945359a82b7c7d574e827c563dc6049448c329db1de0e97c078333c384b", &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

17:38:45 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:45 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = gettid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x845}, 0x20000000)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x54851)

17:38:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

17:38:45 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={0x0, &(0x7f0000000100)="66cd1ba05fe8e8a83693c8985f3bbf5d51e635ce0057105b"}}, &(0x7f0000000180))

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:45 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, &(0x7f0000000180))

17:38:45 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = gettid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', <r3=>0x0})
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x48, r0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x48}, 0x1, 0x0, 0x0, 0x845}, 0x20000000)
sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x4, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8010}, 0x54851)

17:38:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
r2 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)

17:38:45 executing program 1:
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000200)={0x62, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180), 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 3:
timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x4, @thr={0x0, 0x0}}, 0x0)

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:45 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, 0x0)

17:38:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:45 executing program 3:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@release], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:45 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000000)={0x6, 0x1})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f00000001c0)={0x3, 0x5, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0]})
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240)='nl802154\x00', 0xffffffffffffffff)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x44, r2, 0x20, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r4}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x20010801}, 0x4000000)

17:38:45 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280))
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:45 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, 0x0)

17:38:45 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000180)=[@release], 0x0, 0x0, 0x0})

17:38:45 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:45 executing program 3:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)

17:38:45 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNSETGROUP(r0, 0x400454ce, 0xee00)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$media(&(0x7f0000000100)='/dev/media#\x00', 0x4, 0x2ac141)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000040))

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, 0x0)

17:38:46 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:46 executing program 3:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x1, &(0x7f0000000240)={0x0, 0x3d, 0x4, @thr={&(0x7f0000000140)="5fb88763579cdab0d515639cca42f74fad203510e422c06e6096c2d6efa762d2b20cb840f0ca04a25c75d8c5", &(0x7f0000000180)="f8027eabccf26fec35520bd8c9221db7eb7568e3aaf59d5a9a0d9a3f9ce07d04ce31c40a522109c784f232825e6488a03fe349ed4ff89f857ece6ae04a5fca483f2ca43ce92ea65017bbcf98614248291cda0b7479c5e129de88fa6b07b9d83a5f9ae523574d04b24037aa4762269886b31776709fd8ab5c1064c91226d476b41371f051bf"}}, &(0x7f0000000280)=<r0=>0x0)
timer_gettime(r0, &(0x7f0000000300))
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000040)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = fcntl$getown(0xffffffffffffffff, 0x9)
timer_create(0x0, &(0x7f0000000580)={0x0, 0x38, 0x0, @tid=r2}, &(0x7f00000005c0))
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="000425bd7000fcdbdf27030000000900010073797a75013b32000000000900010073797a3100000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r3 = getpgid(0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r5 = syz_genetlink_get_family_id$smc(&(0x7f0000000440)='SMC_PNETID\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(r4, &(0x7f0000000540)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x54, r5, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'tunl0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x54}}, 0x4)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1, @tid=r3}, &(0x7f0000000380))

17:38:46 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x58, 0x0, &(0x7f0000000180)=[@release={0x40046306, 0x1}, @register_looper, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x48, 0x18, &(0x7f00000000c0)={@fd, @fd, @flat=@weak_handle={0x77682a85, 0xb}}, &(0x7f0000000140)={0x0, 0x18, 0x30}}, 0x400}], 0xad, 0x0, &(0x7f0000000200)="b7eb1e96b37e0b0e7f1f300d8124db6cab1cedf04f8348b86914e217a8711d88d8c5fb506cfd164ccdc9c709480e420de088d97d24c3b0f26598f1638d7414decb32b855b0cd4a433b3f01f2e80197347ee7d80766a9ba564f44b0c84ad92691f1984796dfe9e4df219332986773f5dc7b4e652c55ff21dc13aa2cd0265f8692689dd428c098e80724d0c9829aca950648601d234b464a812d1faf22a731b318d47e4bf4d73da4cd14428dec0e"})

17:38:46 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)

17:38:46 executing program 3:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:46 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000500)={0xac, 0x0, &(0x7f0000000340)=[@acquire_done, @increfs, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f00000001c0)={@fda={0x66646185, 0x9, 0x2, 0xd}, @fda={0x66646185, 0x6, 0x1, 0x22}, @ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/231, 0xe7, 0x0, 0x2b}}, &(0x7f0000000240)={0x0, 0x20, 0x40}}, 0x40}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000540)=ANY=[@ANYBLOB="852a646600000000", @ANYRES32=r1, @ANYBLOB="000000000000000000000000854bd8f292a182641a25accd4a7f0d23ac2a68730100000003000000000000000000000000000000852a6873001000"/76], &(0x7f0000000300)={0x0, 0x18, 0x30}}}], 0xe2, 0x0, &(0x7f0000000400)="17bb543dacd77d2de0bd3e8fecd20b728977ccda0dd4bdbe55fb7adde44a924c92611e56a67d3ed958085cb80d2cc1dc1e766321f71c12c6ee9533f1abb4d3220b515ff0a7b29ed0aac5dbd494ed3b5a92eb4ed6376bd79acb202d5ff0dcf5356d0f83dd21f097f140688c90011e1dae374759016b9945dd6667c8ef831f37eeb0b0072b850c65240005af45375937a19e09fcb74511fa79c18f71a2177dd915d75a0e37399cf53c80a99ec65d0e1a59567423033dda1259cd181b88cf76e4deee47b199bdd895f1c9b3a7371d30f3fc8802620c7d1b348423915133da23503780b2"})
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x4cdb, 0x6, 0x4, 0x6540, 0x0, {}, {0x3, 0xc, 0x6b, 0x0, 0x1, 0xfe, "606e2493"}, 0x5, 0x2, @userptr=0x4, 0x400, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff, 0x0, r1})
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2)

17:38:46 executing program 4:
timer_create(0x4, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000040)=""/212)

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:46 executing program 3:
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x0, 0x1, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x4cdb, 0x6, 0x4, 0x6540, 0x0, {}, {0x3, 0xc, 0x6b, 0x0, 0x1, 0xfe, "606e2493"}, 0x5, 0x2, @userptr=0x4, 0x400, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff, 0x0, r1})
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2)

17:38:46 executing program 5:
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xf6}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001}, 0x881)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)

17:38:46 executing program 4:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 3:
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x0, 0x0, &(0x7f0000000140)=[0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x4cdb, 0x6, 0x4, 0x6540, 0x0, {}, {0x3, 0xc, 0x6b, 0x0, 0x1, 0xfe, "606e2493"}, 0x5, 0x2, @userptr=0x4, 0x400, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff, 0x0, r1})
syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x1, 0x2)

17:38:46 executing program 4:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 5:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 3:
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x0, 0x0, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)})

17:38:46 executing program 4:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000040)={0x4cdb, 0x6, 0x4, 0x6540, 0x0, {}, {0x3, 0xc, 0x6b, 0x0, 0x1, 0xfe, "606e2493"}, 0x5, 0x2, @userptr=0x4, 0x400, 0x0, <r1=>0xffffffffffffffff})
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff, 0x0, r1})

17:38:46 executing program 5:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 3:
socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)})

17:38:46 executing program 5:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x11, 0x1}, &(0x7f0000000380))

17:38:46 executing program 4:
timer_create(0x4, 0x0, &(0x7f0000000380))

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:46 executing program 3:
socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 1:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000200)={0x62, 0x0, 0x0, 0x0, 0x0, 0x0})

17:38:46 executing program 4:
timer_create(0x4, 0x0, 0x0)

17:38:46 executing program 5:
timer_create(0x0, 0x0, &(0x7f0000000380))

17:38:46 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 4:
r0 = getpgid(0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000080)={0x28, 0x0, 0x0, {{0x3, 0x10000, 0x2, r0}}}, 0x28)
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x3ab8, 0x800, 0x7, 0x101, 0x73b0be65, 0x8})
r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000340)='SMC_PNETID\x00', 0xffffffffffffffff)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r2, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x20000000)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="8ec9d1c93eb9c4d78d0100dc8600916d4064c42151e47f982c41cd313b577ff79a40a56bf53cc3ace06c", @ANYRES16=r1, @ANYBLOB="200028bd7000fbdbdf250300000014000200697036746e6c300000000000000000000900030073797a320000000005000400020000000900010073797a31000000000500040001000000140002007369743000"/94], 0x64}, 0x1, 0x0, 0x0, 0xc040}, 0x0)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
capset(&(0x7f0000000140)={0x20080522, r3}, &(0x7f0000000180)={0x7f, 0xbb, 0x9, 0xfffffffa, 0x1, 0x7de5})
write$FUSE_STATFS(0xffffffffffffffff, &(0x7f00000000c0)={0x60, 0x0, 0x0, {{0x1, 0x9, 0x20, 0x1, 0x7d, 0x10000, 0x4, 0x81}}}, 0x60)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
r5 = getpgid(r3)
fcntl$getown(r4, 0x9)
capset(&(0x7f0000000480)={0x20080522, r5}, &(0x7f00000004c0)={0x200, 0x9e000000, 0xfffffff8, 0x7fff, 0x3ff, 0x7fffffff})
setsockopt$CAIFSO_REQ_PARAM(r4, 0x116, 0x80, &(0x7f00000001c0)="0a0b76628b481f27262789478d9d07f953ae55676dcbfbbe591a1c921c2686dbcfa6312b70de05e6e3ac834488fe6a3008f6a9e74f7573d4d288a7826e071645ecfc28dd4444ac531e187edecc36991abcd30c6f1a00fda3d197cdfd1df062e28809b3005be55822d072a71bfa5748ef3bac8bad5edd67a00333d0d8af414e814b4ba5fafb5a985fbe4971ffa810235637a8a6100446fa2f92545def54d9cdadf5078b56997a705d9ab427a996eb8cef4efe9e62272270dda669f7b266f13d3853886a3fa281709de03d", 0xca)

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:46 executing program 5:
timer_create(0x0, 0x0, &(0x7f0000000380))

17:38:46 executing program 3:
socket$caif_stream(0x25, 0x1, 0x0)
setsockopt$CAIFSO_LINK_SELECT(0xffffffffffffffff, 0x116, 0x7f, 0x0, 0x0)

17:38:46 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x802)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 1:
timer_create(0x0, 0x0, &(0x7f0000000180))
timer_gettime(0x0, 0x0)

17:38:46 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:38:46 executing program 3:
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0xffff0000}}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0x18)

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:46 executing program 4:
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0xffff0000}}, 0x18)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_WRITE(r0, &(0x7f00000000c0)={0x18}, 0x18)

17:38:46 executing program 5:
timer_create(0x0, 0x0, &(0x7f0000000380))

17:38:46 executing program 1:
timer_create(0x0, 0x0, &(0x7f0000000180))
timer_gettime(0x0, 0x0)

17:38:46 executing program 4:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[0x8, 0x9, 0x7, 0x80000001, 0x2], 0x5, 0x400, 0x0, <r1=>0xffffffffffffffff})
read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_WRITE(r1, &(0x7f0000000180)={0x18, 0x0, r2, {0x6}}, 0x18)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000000)=""/195)

17:38:46 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:46 executing program 3:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r1, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x894}, 0x800)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r1, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x1}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x4c}}, 0x40040)

17:38:46 executing program 2:
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:46 executing program 5:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x1}, &(0x7f0000000380))

17:38:46 executing program 1:
timer_create(0x0, 0x0, &(0x7f0000000180))
timer_gettime(0x0, 0x0)

17:38:46 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:46 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:46 executing program 4:
timer_create(0x0, 0x0, &(0x7f0000000380))

17:38:46 executing program 5:
timer_create(0x0, &(0x7f0000000340), &(0x7f0000000380))

17:38:46 executing program 3:
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))

17:38:46 executing program 1:
timer_gettime(0x0, 0x0)

17:38:46 executing program 2:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:46 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/29)
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:46 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(0xffffffffffffffff, 0x40046208, 0x0)

17:38:46 executing program 5:
timer_create(0x0, &(0x7f0000000340), &(0x7f0000000380))

17:38:46 executing program 2:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:46 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/29)
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 0:
fork()
timer_create(0x1, &(0x7f0000000040)={0x0, 0x8}, &(0x7f0000000080))

17:38:47 executing program 3:
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))

17:38:47 executing program 1:
timer_gettime(0x0, 0x0)

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 5:
timer_create(0x0, &(0x7f0000000340), &(0x7f0000000380))

17:38:47 executing program 2:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 1:
timer_gettime(0x0, 0x0)

17:38:47 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/29)
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 3:
timer_create(0x0, &(0x7f0000000040), &(0x7f0000000080))

17:38:47 executing program 5:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x0)

17:38:47 executing program 2:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 1:
timer_create(0x0, 0x0, 0x0)
timer_gettime(0x0, 0x0)

17:38:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000080))

17:38:47 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/29)
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000))
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 5:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x0)

17:38:47 executing program 2:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x3a0f, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 1:
timer_create(0x0, 0x0, 0x0)
timer_gettime(0x0, 0x0)

17:38:47 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000080))

17:38:47 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/29)
capset(&(0x7f00000002c0)={0x20080522}, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

[  280.322693] binder: 4388:4392 ioctl c0306201 20000240 returned -14
17:38:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 1:
timer_create(0x0, 0x0, 0x0)
timer_gettime(0x0, 0x0)

17:38:47 executing program 5:
timer_create(0x0, &(0x7f0000000340)={0x0, 0x0, 0x1}, 0x0)

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:47 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000100)=""/29)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 3:
timer_create(0x0, 0x0, &(0x7f0000000080))

17:38:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000021c0)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000002200)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_WRITE(r0, &(0x7f0000004240)={0x18, 0x8000000000000013, r1, {0x2}}, 0x18)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$proc_mixer(r2, &(0x7f00000000c0)=[{'LINE', @void}, {'CD', @void}, {'ALTPCM', @void}, {'SYNTH', @val={' \'', 'Line', '\' '}}, {'LINE1', @val={' \'', 'Master Capture', '\' '}}], 0x5d)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, 0xffffffffffffffff)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r2, &(0x7f0000000140)={0x2020, 0x0, <r4=>0x0}, 0x2020)
write$FUSE_OPEN(r3, &(0x7f0000002180)={0x20, 0xfffffffffffffff5, r4, {0x0, 0xa}}, 0x20)

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:47 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 5:
r0 = fork()
r1 = getpgrp(r0)
timer_create(0x1, &(0x7f0000000040)={0x0, 0x8, 0x0, @tid=r1}, &(0x7f0000000080))

[  280.469656] binder: 4409:4415 ioctl c0306201 20000240 returned -14
17:38:47 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 3:
timer_create(0x0, &(0x7f0000000040), 0x0)

17:38:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15)
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
fcntl$getown(r0, 0x9)

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:47 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 3:
capset(&(0x7f00000002c0), 0x0)
timerfd_create(0x7, 0x800)
capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0xffffff81, 0x8, 0x40, 0x101, 0xffffffe0})
clock_gettime(0x2, &(0x7f0000000080))

17:38:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15)
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
fcntl$getown(r0, 0x9)

[  280.583556] binder: 4429:4434 ioctl c0306201 20000240 returned -14
17:38:47 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@register_looper, @free_buffer, @transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}, 0x1000}], 0x3, 0x0, &(0x7f0000000600)="034a3b"})

17:38:47 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 4:
capset(0x0, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15)
r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)
fcntl$getown(r0, 0x9)

17:38:47 executing program 3:
capset(&(0x7f00000002c0), 0x0)
timerfd_create(0x7, 0x800)
capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0xffffff81, 0x8, 0x40, 0x101, 0xffffffe0})
clock_gettime(0x2, &(0x7f0000000080))

17:38:47 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r0=>0x0})
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = getpgid(r3)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x15)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)

17:38:47 executing program 4:
capset(0x0, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 3:
capset(&(0x7f00000002c0), 0x0)
timerfd_create(0x7, 0x800)
capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0xffffff81, 0x8, 0x40, 0x101, 0xffffffe0})
clock_gettime(0x2, &(0x7f0000000080))

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 1:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)

17:38:47 executing program 3:
capset(&(0x7f00000002c0), 0x0)
timerfd_create(0x7, 0x800)
capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x5, 0xffffff81, 0x8, 0x40, 0x101, 0xffffffe0})

17:38:47 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r0=>0x0})
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = getpgid(r3)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

17:38:47 executing program 0:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={&(0x7f0000000040)='./file0\x00'}, 0x10)

17:38:47 executing program 4:
capset(0x0, &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 3:
capset(&(0x7f00000002c0), 0x0)
timerfd_create(0x7, 0x800)

17:38:47 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 4:
capset(&(0x7f0000000040), &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 3:
timerfd_create(0x7, 0x800)

17:38:47 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 1:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

17:38:47 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r0=>0x0})
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r3=>0x0)
r4 = getpgid(r3)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x0, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r0}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_PID={0x8, 0x1c, r3}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0)

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 4:
capset(&(0x7f0000000040), &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 3:
timerfd_create(0x0, 0x800)

17:38:47 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 3:
timerfd_create(0x0, 0x800)

17:38:47 executing program 1:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

17:38:47 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:47 executing program 4:
capset(&(0x7f0000000040), &(0x7f0000000080)={0x200, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:47 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r1=>0x0)
getpgid(r1)

17:38:47 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:47 executing program 3:
timerfd_create(0x0, 0x800)

17:38:48 executing program 1:
bpf$OBJ_GET_PROG(0x7, 0x0, 0x0)

17:38:48 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140))

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, 0x0)

17:38:48 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 3:
timerfd_create(0x7, 0x0)

17:38:48 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={0x0}, 0x10)

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, 0x0)

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r1=>0x0)
getpgid(r1)

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
getpgid(0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 0:
syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000140)="bb"})

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, 0x0)

17:38:48 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={0x0}, 0x10)

17:38:48 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r1=>0x0)
getpgid(r1)

17:38:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3af201f0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:48 executing program 1:
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)={0x0}, 0x10)

17:38:48 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140)=<r1=>0x0)
getpgid(r1)

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:48 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

[  281.446000] binder: 4589:4591 ioctl c0306201 0 returned -14
17:38:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140))

17:38:48 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x40000000, 0x7fff, 0x80000000, 0xffffffff})

[  281.566055] binder: 4606:4615 ioctl c0306201 0 returned -14
17:38:48 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr=0x4, 0xffffffff})

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
getpgid(0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 1:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3af201f0, 0x0, 0x7fff, 0x80000000, 0xffffffff})

[  281.652112] binder: 4630:4633 ioctl c0306201 0 returned -14
17:38:48 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x20, 0x0, 0x0, 0x0, 0x0, 0x0})

17:38:48 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr, 0xffffffff})

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:48 executing program 1:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3af201f0, 0x0, 0x0, 0x80000000, 0xffffffff})

17:38:48 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)

[  281.773493] binder: 4649:4655 ioctl c0306201 20000240 returned -14
17:38:48 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 1:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3af201f0, 0x0, 0x0, 0x0, 0xffffffff})

17:38:48 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)

17:38:48 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:48 executing program 1:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
getpid()
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)

17:38:48 executing program 1:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:48 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)

17:38:48 executing program 4:
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x3af201f0})

17:38:48 executing program 1:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:48 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:48 executing program 5:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:48 executing program 1:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 1:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 0:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 1:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x2004, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 2:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 4:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:49 executing program 2:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 0:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 2:
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:49 executing program 0:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 3:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000100)='ns/uts\x00')

17:38:49 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 2:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:49 executing program 0:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 2:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 0:
r0 = getpgid(0x0)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r1, 0x12)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
getpgid(0x0)
capset(&(0x7f00000000c0)={0x3cc78ca9, r0}, 0x0)
r2 = gettid()
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
write$FUSE_OPEN(r3, &(0x7f0000000280)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x10}}, 0x20)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
ioctl$VIDIOC_DQEVENT(r4, 0x80885659, &(0x7f0000000140)={0x0, @motion_det})
capset(&(0x7f0000000000)={0x19980330, r2}, 0x0)
r5 = getpgid(0x0)
capset(&(0x7f0000000200)={0x19980330, r2}, &(0x7f0000000240)={0x77266868, 0x4, 0x7, 0x2, 0x6, 0x6})
capset(&(0x7f00000002c0)={0x19980330, r5}, 0x0)
timer_create(0x1, &(0x7f0000000080)={0x0, 0x15, 0x0, @tid=r5}, &(0x7f0000000100))

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x6, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 2:
r0 = syz_open_dev$vbi(0x0, 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)

17:38:49 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000000040)={0x60, 0x0, 0x0, {{0x9, 0xfff, 0x0, 0x76a1, 0xec, 0x0, 0xbb0a, 0x1}}}, 0x60)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)

17:38:49 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x4, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 2:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))
capset(&(0x7f0000000000)={0x20080522}, 0x0)

17:38:49 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)
r2 = gettid()
capset(&(0x7f0000000180)={0x20071026, r2}, &(0x7f00000001c0)={0xfffffe01, 0x4, 0x101, 0x207, 0x6, 0x800})
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000000c0))

17:38:49 executing program 3:
capset(0x0, &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 2:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x8, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)
r2 = gettid()
capset(&(0x7f0000000180)={0x20071026, r2}, &(0x7f00000001c0)={0xfffffe01, 0x4, 0x101, 0x207, 0x6, 0x800})
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000000c0))

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x2, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 2:
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f00000000c0)={0x0, 0xa, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz0\x00', 0x200002, 0x0)

17:38:49 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))
capset(&(0x7f0000000000)={0x20080522}, 0x0)

17:38:49 executing program 3:
capset(0x0, &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)
r2 = gettid()
capset(&(0x7f0000000180)={0x20071026, r2}, &(0x7f00000001c0)={0xfffffe01, 0x4, 0x101, 0x207, 0x6, 0x800})
ioctl$KVM_GET_REGS(0xffffffffffffffff, 0x8090ae81, &(0x7f00000000c0))

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x7, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:49 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))
capset(&(0x7f0000000000)={0x20080522}, 0x0)

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

17:38:49 executing program 3:
capset(0x0, &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)
r2 = gettid()
capset(&(0x7f0000000180)={0x20071026, r2}, &(0x7f00000001c0)={0xfffffe01, 0x4, 0x101, 0x207, 0x6, 0x800})

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)
gettid()

17:38:49 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:49 executing program 3:
capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

17:38:49 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

17:38:49 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:49 executing program 3:
capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:49 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
sched_rr_get_interval(r1, &(0x7f0000000080))
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:49 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, 0x0)

17:38:50 executing program 3:
capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x20, 0x8478, 0x80000001, 0x8, 0x2})

17:38:50 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

17:38:50 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)

17:38:50 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x6, 0x1, @userptr=0x4, 0xffffffff})

17:38:50 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, 0x0)

17:38:50 executing program 4:
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040))

17:38:50 executing program 5:
syz_open_dev$binderN(&(0x7f00000000c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000640)={0x5c, 0x0, &(0x7f0000000500)=[@register_looper, @free_buffer, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)}, 0x1000}], 0x3, 0x0, &(0x7f0000000600)="034a3b"})

17:38:50 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
getpgid(0x0)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x1, @userptr=0x4, 0xffffffff})

17:38:50 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, 0x0)

17:38:50 executing program 4:
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040))

17:38:50 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 5:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000040)=""/91)

17:38:50 executing program 2:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:50 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr=0x4, 0xffffffff})

17:38:50 executing program 4:
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040))

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, 0x0)

17:38:50 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000080)={0x2})

17:38:50 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

17:38:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=<r3=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {r1, r2/1000+10000}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34, 0x0, r3})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)

17:38:50 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr, 0xffffffff})

17:38:50 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 2:
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020}, 0x2020)
read$fb(r0, &(0x7f0000002140)=""/206, 0xce)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x4, 0x0, [{0x9f7, 0x0, 0x667}, {0x993, 0x0, 0xf73}, {0x30f, 0x0, 0x7}, {0x274, 0x0, 0x400}]})

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x8478, 0x80000001, 0x8, 0x2})

17:38:50 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

17:38:50 executing program 1:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x0, 0x0, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "c883bd26"}, 0x0, 0x0, @userptr})

17:38:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=<r3=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {r1, r2/1000+10000}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34, 0x0, r3})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)

17:38:50 executing program 0:
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000040))

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0x8, 0x2})

17:38:50 executing program 1:
mmap$binder(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = gettid()
capset(&(0x7f0000000040)={0x20071026, r1}, 0x0)

17:38:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=<r3=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {r1, r2/1000+10000}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34, 0x0, r3})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)

17:38:50 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040))

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2})

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = gettid()
capset(&(0x7f0000000040)={0x20071026, r1}, 0x0)

17:38:50 executing program 1:
mmap$binder(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

17:38:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f00000000c0)=<r3=>0xffffffffffffffff)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {r1, r2/1000+10000}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34, 0x0, r3})

17:38:50 executing program 0:
socket$phonet(0x23, 0x2, 0x1)
bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040))

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2})

17:38:50 executing program 1:
mmap$binder(&(0x7f0000ff7000/0x6000)=nil, 0x6000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = gettid()
capset(&(0x7f0000000040)={0x20071026, r1}, 0x0)

17:38:50 executing program 0:
socket$phonet(0x23, 0x2, 0x1)
bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
clock_gettime(0x0, &(0x7f0000000080)={<r1=>0x0, <r2=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {r1, r2/1000+10000}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:50 executing program 1:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = gettid()
capset(&(0x7f0000000040)={0x20071026, r1}, 0x0)

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x8, 0x2})

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f0000000040)={0x20071026}, 0x0)

17:38:50 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000040))

17:38:50 executing program 0:
socket$phonet(0x23, 0x2, 0x1)
bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2})

17:38:50 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f0000000040)={0x20071026}, 0x0)

17:38:50 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:50 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, 0x0, 0x0)

17:38:50 executing program 1:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = gettid()
capset(&(0x7f0000000040)={0x20071026, r1}, 0x0)

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f0000000040)={0x20071026}, 0x0)

17:38:50 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:50 executing program 5:
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:50 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, 0x0, 0x0)

17:38:50 executing program 4:
socket$phonet(0x23, 0x2, 0x1)
bind$phonet(0xffffffffffffffff, &(0x7f0000000000)={0x23, 0x1, 0x0, 0x4}, 0x10)

17:38:50 executing program 1:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = gettid()
capset(&(0x7f0000000040)={0x20071026, r1}, 0x0)

17:38:50 executing program 5:
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
getpgid(0x0)
r0 = gettid()
capset(&(0x7f0000000040)={0x20071026, r0}, 0x0)

17:38:50 executing program 3 (fault-call:0 fault-nth:0):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:50 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, 0x0, 0x0)

17:38:50 executing program 1:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
gettid()

17:38:50 executing program 5:
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:50 executing program 4 (fault-call:1 fault-nth:0):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:50 executing program 2:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = gettid()
capset(&(0x7f0000000040)={0x20071026, r0}, 0x0)

17:38:51 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x4}, 0x10)

[  284.076846] FAULT_INJECTION: forcing a failure.
[  284.076846] name failslab, interval 1, probability 0, space 0, times 0
17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
timerfd_gettime(r0, 0x0)

17:38:51 executing program 2:
r0 = gettid()
capset(&(0x7f0000000040)={0x20071026, r0}, 0x0)

[  284.143238] CPU: 0 PID: 5046 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0
[  284.151067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.160541] Call Trace:
[  284.163143]  dump_stack+0x1b2/0x281
[  284.166779]  should_fail.cold+0x10a/0x149
[  284.170933]  should_failslab+0xd6/0x130
[  284.174926]  kmem_cache_alloc+0x28e/0x3c0
[  284.179083]  prepare_creds+0x39/0x490
[  284.182987]  SyS_capset+0x3c6/0x720
[  284.186632]  ? SyS_capget+0x540/0x540
17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000001c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, r3, {{0x5, 0xfffffffffffffffd, 0x1, 0xffffffffffffffff}}}, 0x28)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$FBIOPAN_DISPLAY(r1, 0x4606, &(0x7f0000000100)={0x10, 0x300, 0x140, 0x320, 0x1ff, 0x0, 0x20, 0x1, {0x8, 0x6, 0x1}, {0x80000000, 0x5}, {0x2, 0x0, 0x1}, {0x3ff, 0xc13}, 0x1, 0x80, 0x6, 0x80000001, 0x0, 0x38000, 0x7f, 0x1, 0x0, 0x8d99, 0x3, 0xffffffff, 0x18, 0x2, 0x3, 0xc})
read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x2020)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r4, 0xc018620c, &(0x7f0000002200))
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f0000004280)=ANY=[@ANYBLOB="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"])
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f00000000c0)={'syzkaller0\x00'})
timerfd_gettime(r0, 0x0)

[  284.190435]  ? vfs_write+0x319/0x4d0
[  284.194151]  ? fput+0xb/0x140
[  284.197259]  ? SyS_write+0x14d/0x210
[  284.200976]  ? __do_page_fault+0x159/0xad0
[  284.205214]  ? do_syscall_64+0x4c/0x640
[  284.209286]  ? SyS_capget+0x540/0x540
[  284.213095]  do_syscall_64+0x1d5/0x640
[  284.216993]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  284.222179] RIP: 0033:0x466459
[  284.225365] RSP: 002b:00007f828e4ec188 EFLAGS: 00000246 ORIG_RAX: 000000000000007e
[  284.233099] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
17:38:51 executing program 2:
gettid()
capset(0x0, 0x0)

17:38:51 executing program 1:
socketpair(0x2b, 0x6, 0x0, 0x0)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)

[  284.240369] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000
[  284.247637] RBP: 00007f828e4ec1d0 R08: 0000000000000000 R09: 0000000000000000
[  284.254907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.262262] R13: 00007ffdcf06a2bf R14: 00007f828e4ec300 R15: 0000000000022000
17:38:51 executing program 3 (fault-call:0 fault-nth:1):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:51 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x4}, 0x10)

17:38:51 executing program 1:
socketpair(0x2b, 0x6, 0x0, 0x0)
getpgid(0x0)

17:38:51 executing program 2:
gettid()
capset(0x0, 0x0)

17:38:51 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r0 = timerfd_create(0x5, 0x80000)
timerfd_gettime(r0, 0x0)

17:38:51 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x0, 0x0, 0x4}, 0x10)

17:38:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "6978fbce2b6b1d371684644d628cda1681de6c1700f730da6bd91501b02ba15704e0bad97d9125bb52224dff4ec06d352488c97049d03f0f787a24a214258afd24d37e89c6d327ac1941209f99fb6c48a6a92e47b69f63d43617b474e8984710fd7bed9a4c5aa7f1ede312c2a0a3ab209050c63d2b4a7ab4127234b92b0197a85bfef84e8a9aa35b933c34a36cb209a902c5655990998d75d31b7935e87fa66ebdc83172a2814ab1c9996648832a75ddbf34ea429586061cb77cefe99901e0d7534a21f721055ebf68f6f06fb62ed41f3f7e3530c5bbb8ba6180d423bb0d9fde1041268cf988d4eeb0f321fab1804138fc1af8aec36d5abb3c33d98b747a96e7d0fe9c263ebb43527588bb46b9dd568121b0e0455bce28fcc61afa735bc08f770460dfa6a06b810f56e08991d5008beb5fa06b79b4c404d26017fb316b0cc3bf430e77ec35ab3a03f5d6613ed95d501f766b0effd4282ce4014ca851fffec99ac534e162d63f1c3223cc52f6d5f8c9c1c64a8a16d15ab0a85abe34a7ca839de27e6cab712e8886dbc6c96ccc7e1230b9962733ba31107e797c5b7b2827b27044136bfbcf986de2d44526f9f101fc34d5695bd76bb5ecb2a24e0f01cbacbf80a44f2bd66fde9f68b1056f827a0ade34d4f8268db47a87ec570263e8feec51b531500f521457494c08bf51f7702d85e1f19a257056f96fc996a4e771bff88a1b629e51e6e0827c6840b86a3e9d82dda74e0d865ff0f98772cb01ca8ab70f3861666db7e130d28761ab7e3da917562f49d19024e65babcda6fd2db14322d1e9c963ee1eb87173df455270478dbcfca95a87d580150e184535f82235e4c0c7e923ba97713a396bf160436866990bddd9154b78314ce2590719880c39ce0321774fcda2812308a7f71603caa8be836837b9c26b47dcf5426d97fe56eb6b80f2080f558c14b1f98e58bd98bb9cfa152494fb17ee41b2b26efc4119ebf99be18a480d315157f524c65cdea08561d1a16e57df11f5156902b959537a243929ad7ba1878fd3f074184f1ee28094370754b1f5fbb7f6b569e2aee5bf1f233986e0f0d4f49ebacc9812d8442092300b2ff5e96e68db9689947c66899820bda854d89f62b4fb982f7e80f55747dbc1f13a41e5e357a0e4a3e7a7ec8b41c32b52616424f60d5a12b7b0e0e380bc56f04fabf4a31321c57ee7cd7bdece9a82854ad3013693902b8571a654ca5b98aa80de7b9e9e1e6a446b77b7950794ee265e63daf5cc6d5119ab58d8ec4ddb17706895caa303ac63af6e0dfbd8cdabc9761bc6d929902cf7fcd0e23411a07c708dd5b72945dd422885c19a148522ba3dbfe464eefa14ee2ec14ccfa389f28b2e65e53ef070da530ad37cdc6dc77e7605385fba099c250c3a5d7da186978a403419439006a8bfab5b1db706aaa529cd985fdb10602e07223a0e22f284014f91ba04461d2b88dd24a95df991374dff8ae66fa231d7dcb46a12b7076df8721bce3b9e903f225eb6d337ad2126e3f908e2af493ea9ef26939b15a8b036b73ff13893011423c38ee905e7a880820daa50ad17613e610fa47ebe75c01764c750f8470f53ecc4e755dedee19db1e462a0db3d2799750a958ad6ff84d7fb4da88a1c693f6c64077a3024153ee13d91b384baf3d84421abb79c8ccc1052ce267e6eb812fe39bea883d6d2eab3cc7ce6f14c57d57493c2b978f02e01fdc0f7fbd37f7683fea6257e70ccd42939a7f398b1fd900b133a9fb34111e82a21ad559fe414be9479d0e01d3e72d3decea5a55a96c805223e8b04af10f8b1cf01e732680039fee66553fbd62584c30239284fd5a5f3fe91aaa6fee2feb6d0ea56fbb5efb6feaadd2b6cd073d34534937b08cc706fb2cb6f495fd7b9ed9eff3d620a9d953e3217eb62438145fda11c8e520c5d1a196625b058b73b9b03b363dda4a1741895e6ee7040476d6e57f912e7990c49abe12ed99167ccfc409c86b893d97acd2f6557f82218e88baf4c7b6e2ea0697ae3f495155e2c6bbec56b9e26326f5199ee729704764ac993cd9f5aafae928e399ba25d3d5294838391aab9696315383e233abba8f080f4713e57160f98456838ae90db1464aa5c0900743c3a2542e4ffcc85ffd9a77c7bd0695744be4bd98fbb5077b1c0870b9496ba46ce9ecadb9f88d96c364576af13422ef4ee3bd955c28246ed23f43ba54ab7ead03972f1c486f8f35e977e2df790e4ee52d909dbbed2d722b63474af168a26da10f8516ef0f9a95308faf200898cefdd62ad495a5b1a11483b6800af4a3e53e17404c3569c75ffe21c69f8dfb59ed46623e1d80c3b9d32ac669570d5e0e278444a0b63259ea079421dfdfd142ff80c1f9e5359ef40fba0b0286e3aa76c56917bd6e01683d651a03223e5cda85f418e815454a40ddbefd4a798c2441bd8882ba3711e19256fa9f300eb9aa54ca681486ae788984b01c61da0c316f8cf8af5ff06c92e16937041b6e038ad4553d10e638430995178078076b3503ff2b2ec9e278706e411cf9da8b53abf30c4bec1c93d1a9019b8519758867926c30cb90972cdba1f23ef389a4cbd56c664a6f2e2cbc927b6a462ab98b71eaaf1efa39268964425003b032b881372bc3775c9ee7ff7a7654ce3d7201496533f1c0e1c318c8e3b00d6137d4a428d8212813a4e6602461479653707fd7fec4ba4d51afba385b380d31cf4cb2e08f08ce8aa10729c41b1564b897f9ede2d6b11e9f4e96c467407b1f9bd9e91bcfade90dfe33f599ceaed9c8f1cf26e6990346cba99489625609add9235b73248af4f08698d8733856245f7829c8405b331b854d42ec52b0d19a2c1e4f19f1c72c5cef683f8bb3911b715a44c81385db7fdeb25aa754d0b71be8fd4cf2257cbc1caa06ee84a55b63d7b806bc6e2b693a45dd6435797fc825842445be7d3f97dce89d57bc035ceb48cad7bb025d02ebc35a1d2fb4d31dac9504eebcb3d63f0c9a5909883a3a9ca971f0e38009b69be86dcbb4363ea6df8fdd48316b1ee33eaaeb2bf9c6fc0766184cb44cebc30ee11edd20dc4d470367576f4b0b930e5b2d829cc8378e0aa3c5447f23369a2d3ac26d08901df13431d1fc08826688b6644dbee8fd7d7bf1ae3e7eaf5d364e514a707f9ecd60c26cc47e3efa4db3ece1094e0490bdf8f16882391284cc4350101730dc46de6e1fc6efefe5c1367db89418effa9a353aafa72d22bda5b0525c160374b8e5c6d667f1ff13262a66749917a2c98bb33099d1e489043f66ab34d112923c765a7b19e4807aa8f708ec6a723dce5fcdb024d51d72ff23d4929da8aaf42706c457e95a7763ed72d9e3e81ac817a53e7c22d7757b233fb762e9a5fb26ffcd6b569d125064bd4e29c7c83bd35c006807b8d2385707d231a32b6be9ec1304108eb3b450b45169684821a8e3d1289db53de4a871fca1a9ad4dc6858bf79e1e78a1583c184a123d199e0e6af88788fa20eaf52599d749b4bb8e70e407fcecdd7491bfb02252b16db28ff1876830f64bb2824523c7a591ea8069649f1eaefb734489cddc9f72a33eba21f34ad0045081ef53f3ccd5e73caa77e719a9ec4bd2712c12cddd70f6594ef5c3e724e62b71f7fffc807893afe45625f4bcf4d9304d8ae6d9a014c677557b7912769570590e047e1560f14f6b908d68edd14d3d3bd29bf61eaaf0cbba22606f41e4a62cc9c6fa0e18cde0a4d8b2a6efa103e555426f803b2b09ebf189c02288106e8ec2a33819253a277347193ef962999daf80329fca2bd131febfac8c815209d8af903f9a8043b85bac51b86064b64380fc809ee375a091014eb591a174c759d2db7438ab744d854ba13590845cd9b31fff5e88913f860958c0d9c015e0943b6bc925631bd01c2f7cebb9f95eb8d3dadcb5d45403f53cc16f65f004ec9541d7c8afaab1bd5690c71686041d7d4703fea116817a219b545c6c93eac71b6e8c63ffac10750246beeafbcb5aece7f77d6473445b247cbc786f9b5de9561ca8d464eefaa8b62146d8eb7a5e0db7dfd7b49b9732e8c07925354a5c4f6f6f32707d4ebf17caf5dffb7bf0b8e03b7b514f832ce7950888efca6ec70e94b70ccaa1ba15db6a69fe5a1249c6de4a75c36e5936c78719c3a3b5ca559b94928d3ba9b9a259a27a09f2706e19e98156c3cd1f8ba5369c76484b23b187080034f6c91c5dd79027691758b688b41cb3d8c430c4d12c3a3388c69b3878efa4225df1aa5dc286918b4bd2ba8909374eeb9117d1a24793bf9745a538772c5edfe3dd901b52b6f10583b086fce1b9332169d15291be89e3186d449748c035f7f9033ec0265a96e50269a9ae0a6442865971f66b248bd6fcfd57f7a90d5286d87e9b1e2e0c5a9a777efbeb8541702f3ebd8352f38b309d023903fda9a43975d096b809d0b0e69a09a7e6774739525889391722269c19aa6786f8ab63ad670c0e49ce29d684ba57137a41ddb07a70dfc6ff4f92349b62f096671aa4aaa78940ebf9eb94c1cb3ee76bad5cf762d1a823efb69cd40e2db902a773a6efb5dc9e767cb4ea5d00f62d8ecd89dcc9300f3531da54f8b50da9700c0eeb858cbb76d8e1a3bdf8a55284635cf19ab9062c0eb45db3071769773093b06c14310b8e7274a4da793d9b3da46304417c6f37754fb8cad4aa7c3585f080090a71f2045f7a72924a44602f73041685e3b5e3d18d42bd1dbb439a48df44732449f501c8224f49fa4bdf1a4bc67115200258c67d5ab4dd6ea6555a55178cb52e755424c03f8946acf09e237367d0108274dad8beaf570ada3ce71cbc275df7fa98aabe67f168d4a6a4e5ccf1f941fa961e5733192065e425e6fa152916be7c37cb86ceacf22d36e93f624d28f8514437657561c36adbfe522c6657e95c91a2e38302e035c7dbf6ed7e4c05fc33409e3641569b71d585c81a6725a515c86245b0abb52ee5421fd993f8e8e9afc1d85b3a11da45ef8b059922b882087e68c0ed9a1488a48ca9e1d909f947a9a49510fa361a1e9e4b0e0ed09e9e5bc001685d20183aede2b772a9014fd2e4ef630e925e579931eb195d05f326af0e1d246047d542b0173eba6cb5bb9cc1dd919be32d16f9b5c540e472ab4881393770322d78c8b8df99ae6ba5d1d12c3e9a22ea606a43b623f904bbcd214289ce5a7f86152669f39ad22f7ff77f8cf2c34025ecd281e4dcfcf2446c7265ab5af016dc28268518f793664edc1672eccc94821843257158f3a6b76243fe625c75a6c2b530b438ee566069730b77a441dee8d47038aa433bac8b698a377f1a347016857e3c985ceaf5cd4a01ff1f4c91c654355f7b9a82c9592aed92df6fc2ffa093388b2e4b24c8f1a13c8ef0970456752c9426ca49a7b859476180175e4215b8c0962bb7c25e1391b9c0fe44179c754d5378a8d0f785d"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)
write$fb(r2, &(0x7f0000001280)="e5d431ece969035f7a6e4a7b37fb8c394d6dd791d6ab921137ea3d94708dc86dd831df6d0df56f75012fa76c2ade6807d0a254ed123bb6e9cb5c6badfa8eae0735e2825fd64263fb38cce3e89f28a2bac4db98ea3acb2a49d38466d88f53155a63ed1feca76abbc5ff73a1a52a2a93ba51b5059d3a980e3e19311eed72fcfea9fce47cb87a1dd351f4d13da462d10c4bb632149182262727e8ec60590a786923dc44749d17b9043c0d955e387677e82e2f95cf0532254f36278c0795e662a16ba84dfe99a850c96bc2f02d061737f8f6c2e7702fff9cc955672eb748d736bec8b3b6c37a747f3453f8", 0xe9)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)

17:38:51 executing program 1:
socketpair(0x2b, 0x6, 0x0, 0x0)

17:38:51 executing program 2:
gettid()
capset(0x0, 0x0)

[  284.405405] FAULT_INJECTION: forcing a failure.
[  284.405405] name failslab, interval 1, probability 0, space 0, times 0
[  284.453298] CPU: 0 PID: 5087 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0
[  284.461125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  284.470483] Call Trace:
[  284.473084]  dump_stack+0x1b2/0x281
[  284.476728]  should_fail.cold+0x10a/0x149
[  284.480974]  should_failslab+0xd6/0x130
[  284.484978]  kmem_cache_alloc_trace+0x29a/0x3d0
[  284.489658]  aa_alloc_task_context+0x4d/0x90
[  284.494068]  apparmor_cred_prepare+0x1a/0xb0
[  284.498489]  security_prepare_creds+0x76/0xb0
[  284.503003]  prepare_creds+0x2ef/0x490
[  284.506890]  SyS_capset+0x3c6/0x720
[  284.510519]  ? SyS_capget+0x540/0x540
[  284.514323]  ? vfs_write+0x319/0x4d0
[  284.518039]  ? fput+0xb/0x140
[  284.521141]  ? SyS_write+0x14d/0x210
[  284.524858]  ? __do_page_fault+0x159/0xad0
[  284.529095]  ? do_syscall_64+0x4c/0x640
[  284.533072]  ? SyS_capget+0x540/0x540
[  284.536877]  do_syscall_64+0x1d5/0x640
[  284.540768]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  284.545960] RIP: 0033:0x466459
17:38:51 executing program 2:
r0 = gettid()
capset(&(0x7f0000000040)={0x0, r0}, 0x0)

[  284.549146] RSP: 002b:00007f828e4ec188 EFLAGS: 00000246 ORIG_RAX: 000000000000007e
[  284.556856] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[  284.564559] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000020000000
[  284.571827] RBP: 00007f828e4ec1d0 R08: 0000000000000000 R09: 0000000000000000
[  284.579095] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  284.586362] R13: 00007ffdcf06a2bf R14: 00007f828e4ec300 R15: 0000000000022000
17:38:51 executing program 3 (fault-call:0 fault-nth:2):
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:51 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0x1}, 0x10)

17:38:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:51 executing program 1:
socketpair(0x0, 0x6, 0x0, 0x0)

17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)

17:38:51 executing program 2:
r0 = gettid()
capset(&(0x7f0000000040)={0x0, r0}, 0x0)

17:38:51 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r0=>0x0}, 0x2020)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f00000020c0)={0x18, 0x0, r0, {0x10001}}, 0x18)

17:38:51 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)
write$fb(r2, &(0x7f0000001280)="e5d431ece969035f7a6e4a7b37fb8c394d6dd791d6ab921137ea3d94708dc86dd831df6d0df56f75012fa76c2ade6807d0a254ed123bb6e9cb5c6badfa8eae0735e2825fd64263fb38cce3e89f28a2bac4db98ea3acb2a49d38466d88f53155a63ed1feca76abbc5ff73a1a52a2a93ba51b5059d3a980e3e19311eed72fcfea9fce47cb87a1dd351f4d13da462d10c4bb632149182262727e8ec60590a786923dc44749d17b9043c0d955e387677e82e2f95cf0532254f36278c0795e662a16ba84dfe99a850c96bc2f02d061737f8f6c2e7702fff9cc955672eb748d736bec8b3b6c37a747f3453f8", 0xe9)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)

17:38:51 executing program 2:
r0 = gettid()
capset(&(0x7f0000000040)={0x0, r0}, 0x0)

17:38:51 executing program 1:
socketpair(0x0, 0x6, 0x0, 0x0)

17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = syz_open_dev$evdev(&(0x7f00000001c0)='/dev/input/event#\x00', 0xfffffffffffffff9, 0x10b000)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000200)=""/102)
read$FUSE(r0, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000002380)={&(0x7f0000002340)=[0x5], 0x1, 0x80000, 0x0, <r3=>0xffffffffffffffff})
syz_genetlink_get_family_id$smc(&(0x7f0000002300)='SMC_PNETID\x00', r3)
getgroups(0x3, &(0x7f00000022c0)=[r2, 0xffffffffffffffff, 0x0])
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
write$FUSE_LSEEK(r4, &(0x7f0000000100)={0x18, 0xfffffffffffffffe, 0x0, {0x3}}, 0x18)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x4ca, 0x5, 0x4, 0x1000, 0x4, {}, {0x3, 0x8, 0x3f, 0x7, 0x4, 0x0, "871c4f8f"}, 0x3ff, 0x1, @offset=0x1000, 0x7, 0x0, r0})
ioctl$EVIOCGBITKEY(r4, 0x80404521, &(0x7f0000000140)=""/121)

17:38:51 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:51 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)
write$fb(r2, &(0x7f0000001280)="e5d431ece969035f7a6e4a7b37fb8c394d6dd791d6ab921137ea3d94708dc86dd831df6d0df56f75012fa76c2ade6807d0a254ed123bb6e9cb5c6badfa8eae0735e2825fd64263fb38cce3e89f28a2bac4db98ea3acb2a49d38466d88f53155a63ed1feca76abbc5ff73a1a52a2a93ba51b5059d3a980e3e19311eed72fcfea9fce47cb87a1dd351f4d13da462d10c4bb632149182262727e8ec60590a786923dc44749d17b9043c0d955e387677e82e2f95cf0532254f36278c0795e662a16ba84dfe99a850c96bc2f02d061737f8f6c2e7702fff9cc955672eb748d736bec8b3b6c37a747f3453f8", 0xe9)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)

17:38:51 executing program 3:
syz_open_dev$binderN(&(0x7f0000000100)='/dev/binder#\x00', 0x0, 0x2)
capset(&(0x7f0000000140), &(0x7f0000000040)={0x0, 0x8000, 0x0, 0x80000001, 0x2, 0x8})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
setsockopt$CAIFSO_LINK_SELECT(r0, 0x116, 0x7f, &(0x7f00000000c0), 0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00'})

17:38:51 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:51 executing program 2:
gettid()
capset(&(0x7f0000000040)={0x20071026}, 0x0)

17:38:51 executing program 1:
socketpair(0x0, 0x6, 0x0, 0x0)

17:38:51 executing program 3:
capset(&(0x7f0000000000)={0xf1504}, &(0x7f0000000040)={0x0, 0xfffffffd, 0x40, 0x80000004, 0x3})

17:38:51 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)
write$fb(r2, &(0x7f0000001280)="e5d431ece969035f7a6e4a7b37fb8c394d6dd791d6ab921137ea3d94708dc86dd831df6d0df56f75012fa76c2ade6807d0a254ed123bb6e9cb5c6badfa8eae0735e2825fd64263fb38cce3e89f28a2bac4db98ea3acb2a49d38466d88f53155a63ed1feca76abbc5ff73a1a52a2a93ba51b5059d3a980e3e19311eed72fcfea9fce47cb87a1dd351f4d13da462d10c4bb632149182262727e8ec60590a786923dc44749d17b9043c0d955e387677e82e2f95cf0532254f36278c0795e662a16ba84dfe99a850c96bc2f02d061737f8f6c2e7702fff9cc955672eb748d736bec8b3b6c37a747f3453f8", 0xe9)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0)

17:38:51 executing program 5:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:51 executing program 2:
gettid()
capset(&(0x7f0000000040)={0x20071026}, 0x0)

17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/attr/current\x00', 0x2, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(r1, &(0x7f0000000000))

17:38:51 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)
write$fb(r2, &(0x7f0000001280)="e5d431ece969035f7a6e4a7b37fb8c394d6dd791d6ab921137ea3d94708dc86dd831df6d0df56f75012fa76c2ade6807d0a254ed123bb6e9cb5c6badfa8eae0735e2825fd64263fb38cce3e89f28a2bac4db98ea3acb2a49d38466d88f53155a63ed1feca76abbc5ff73a1a52a2a93ba51b5059d3a980e3e19311eed72fcfea9fce47cb87a1dd351f4d13da462d10c4bb632149182262727e8ec60590a786923dc44749d17b9043c0d955e387677e82e2f95cf0532254f36278c0795e662a16ba84dfe99a850c96bc2f02d061737f8f6c2e7702fff9cc955672eb748d736bec8b3b6c37a747f3453f8", 0xe9)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)

17:38:51 executing program 1:
socketpair(0x2b, 0x0, 0x0, 0x0)

17:38:51 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f00000000c0)=""/4096)
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000080)={0x18, 0x0, 0x0, 0x800})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffc})
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)

17:38:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)

17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000000180))

17:38:51 executing program 2:
gettid()
capset(&(0x7f0000000040)={0x20071026}, 0x0)

17:38:51 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)
write$fb(r2, &(0x7f0000001280)="e5d431ece969035f7a6e4a7b37fb8c394d6dd791d6ab921137ea3d94708dc86dd831df6d0df56f75012fa76c2ade6807d0a254ed123bb6e9cb5c6badfa8eae0735e2825fd64263fb38cce3e89f28a2bac4db98ea3acb2a49d38466d88f53155a63ed1feca76abbc5ff73a1a52a2a93ba51b5059d3a980e3e19311eed72fcfea9fce47cb87a1dd351f4d13da462d10c4bb632149182262727e8ec60590a786923dc44749d17b9043c0d955e387677e82e2f95cf0532254f36278c0795e662a16ba84dfe99a850c96bc2f02d061737f8f6c2e7702fff9cc955672eb748d736bec8b3b6c37a747f3453f8", 0xe9)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

17:38:51 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
timerfd_gettime(r0, 0x0)

17:38:51 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x236c, 0xfffffffd, 0x2, 0x80000001})

17:38:51 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)

17:38:51 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
timerfd_gettime(r0, 0x0)

17:38:51 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x2, 0x401})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x10001, 0x100], 0x2, 0x80000})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x4a0082, 0x0)
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000180))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'veth1_to_team\x00'})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x118)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r5, 0x0, 0x0)
timerfd_gettime(r5, 0x0)

17:38:51 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "6064ce2d7c8d37338e887dce4f953a416010307ab64d0e28370d550169d0509507e3fa375ddb5babf05d3b6112b6f997c4e62f22eecc34c2e285e3d620c73ff48346bd3b6968366a3fdc4846cf53dd77cb14b42efa9d0e3a434a30579d456764643b562f716ca2849c09e2aae8b8058a204532f420d243928265e7f943fbf20d7d9a865d31d0d3df2784904f05f0779c09c9d451bc152e2f6d7540c2b5367e9dfed99b206655cce8d4b8fbe5fd2d0bc3f6682db726b56054d348b787ae5502fbc87e840fec9631508d2b938281768e1ce2d389411920857b052d3b7b1d5a63993f14c8d802bf1705f92b814d9de775c0cb3e4dc3153c06962b1089bd1f3f0d5f", "6978fbce2b6b1d371684644d628cda1681de6c1700f730da6bd91501b02ba15704e0bad97d9125bb52224dff4ec06d352488c97049d03f0f787a24a214258afd24d37e89c6d327ac1941209f99fb6c48a6a92e47b69f63d43617b474e8984710fd7bed9a4c5aa7f1ede312c2a0a3ab209050c63d2b4a7ab4127234b92b0197a85bfef84e8a9aa35b933c34a36cb209a902c5655990998d75d31b7935e87fa66ebdc83172a2814ab1c9996648832a75ddbf34ea429586061cb77cefe99901e0d7534a21f721055ebf68f6f06fb62ed41f3f7e3530c5bbb8ba6180d423bb0d9fde1041268cf988d4eeb0f321fab1804138fc1af8aec36d5abb3c33d98b747a96e7d0fe9c263ebb43527588bb46b9dd568121b0e0455bce28fcc61afa735bc08f770460dfa6a06b810f56e08991d5008beb5fa06b79b4c404d26017fb316b0cc3bf430e77ec35ab3a03f5d6613ed95d501f766b0effd4282ce4014ca851fffec99ac534e162d63f1c3223cc52f6d5f8c9c1c64a8a16d15ab0a85abe34a7ca839de27e6cab712e8886dbc6c96ccc7e1230b9962733ba31107e797c5b7b2827b27044136bfbcf986de2d44526f9f101fc34d5695bd76bb5ecb2a24e0f01cbacbf80a44f2bd66fde9f68b1056f827a0ade34d4f8268db47a87ec570263e8feec51b531500f521457494c08bf51f7702d85e1f19a257056f96fc996a4e771bff88a1b629e51e6e0827c6840b86a3e9d82dda74e0d865ff0f98772cb01ca8ab70f3861666db7e130d28761ab7e3da917562f49d19024e65babcda6fd2db14322d1e9c963ee1eb87173df455270478dbcfca95a87d580150e184535f82235e4c0c7e923ba97713a396bf160436866990bddd9154b78314ce2590719880c39ce0321774fcda2812308a7f71603caa8be836837b9c26b47dcf5426d97fe56eb6b80f2080f558c14b1f98e58bd98bb9cfa152494fb17ee41b2b26efc4119ebf99be18a480d315157f524c65cdea08561d1a16e57df11f5156902b959537a243929ad7ba1878fd3f074184f1ee28094370754b1f5fbb7f6b569e2aee5bf1f233986e0f0d4f49ebacc9812d8442092300b2ff5e96e68db9689947c66899820bda854d89f62b4fb982f7e80f55747dbc1f13a41e5e357a0e4a3e7a7ec8b41c32b52616424f60d5a12b7b0e0e380bc56f04fabf4a31321c57ee7cd7bdece9a82854ad3013693902b8571a654ca5b98aa80de7b9e9e1e6a446b77b7950794ee265e63daf5cc6d5119ab58d8ec4ddb17706895caa303ac63af6e0dfbd8cdabc9761bc6d929902cf7fcd0e23411a07c708dd5b72945dd422885c19a148522ba3dbfe464eefa14ee2ec14ccfa389f28b2e65e53ef070da530ad37cdc6dc77e7605385fba099c250c3a5d7da186978a403419439006a8bfab5b1db706aaa529cd985fdb10602e07223a0e22f284014f91ba04461d2b88dd24a95df991374dff8ae66fa231d7dcb46a12b7076df8721bce3b9e903f225eb6d337ad2126e3f908e2af493ea9ef26939b15a8b036b73ff13893011423c38ee905e7a880820daa50ad17613e610fa47ebe75c01764c750f8470f53ecc4e755dedee19db1e462a0db3d2799750a958ad6ff84d7fb4da88a1c693f6c64077a3024153ee13d91b384baf3d84421abb79c8ccc1052ce267e6eb812fe39bea883d6d2eab3cc7ce6f14c57d57493c2b978f02e01fdc0f7fbd37f7683fea6257e70ccd42939a7f398b1fd900b133a9fb34111e82a21ad559fe414be9479d0e01d3e72d3decea5a55a96c805223e8b04af10f8b1cf01e732680039fee66553fbd62584c30239284fd5a5f3fe91aaa6fee2feb6d0ea56fbb5efb6feaadd2b6cd073d34534937b08cc706fb2cb6f495fd7b9ed9eff3d620a9d953e3217eb62438145fda11c8e520c5d1a196625b058b73b9b03b363dda4a1741895e6ee7040476d6e57f912e7990c49abe12ed99167ccfc409c86b893d97acd2f6557f82218e88baf4c7b6e2ea0697ae3f495155e2c6bbec56b9e26326f5199ee729704764ac993cd9f5aafae928e399ba25d3d5294838391aab9696315383e233abba8f080f4713e57160f98456838ae90db1464aa5c0900743c3a2542e4ffcc85ffd9a77c7bd0695744be4bd98fbb5077b1c0870b9496ba46ce9ecadb9f88d96c364576af13422ef4ee3bd955c28246ed23f43ba54ab7ead03972f1c486f8f35e977e2df790e4ee52d909dbbed2d722b63474af168a26da10f8516ef0f9a95308faf200898cefdd62ad495a5b1a11483b6800af4a3e53e17404c3569c75ffe21c69f8dfb59ed46623e1d80c3b9d32ac669570d5e0e278444a0b63259ea079421dfdfd142ff80c1f9e5359ef40fba0b0286e3aa76c56917bd6e01683d651a03223e5cda85f418e815454a40ddbefd4a798c2441bd8882ba3711e19256fa9f300eb9aa54ca681486ae788984b01c61da0c316f8cf8af5ff06c92e16937041b6e038ad4553d10e638430995178078076b3503ff2b2ec9e278706e411cf9da8b53abf30c4bec1c93d1a9019b8519758867926c30cb90972cdba1f23ef389a4cbd56c664a6f2e2cbc927b6a462ab98b71eaaf1efa39268964425003b032b881372bc3775c9ee7ff7a7654ce3d7201496533f1c0e1c318c8e3b00d6137d4a428d8212813a4e6602461479653707fd7fec4ba4d51afba385b380d31cf4cb2e08f08ce8aa10729c41b1564b897f9ede2d6b11e9f4e96c467407b1f9bd9e91bcfade90dfe33f599ceaed9c8f1cf26e6990346cba99489625609add9235b73248af4f08698d8733856245f7829c8405b331b854d42ec52b0d19a2c1e4f19f1c72c5cef683f8bb3911b715a44c81385db7fdeb25aa754d0b71be8fd4cf2257cbc1caa06ee84a55b63d7b806bc6e2b693a45dd6435797fc825842445be7d3f97dce89d57bc035ceb48cad7bb025d02ebc35a1d2fb4d31dac9504eebcb3d63f0c9a5909883a3a9ca971f0e38009b69be86dcbb4363ea6df8fdd48316b1ee33eaaeb2bf9c6fc0766184cb44cebc30ee11edd20dc4d470367576f4b0b930e5b2d829cc8378e0aa3c5447f23369a2d3ac26d08901df13431d1fc08826688b6644dbee8fd7d7bf1ae3e7eaf5d364e514a707f9ecd60c26cc47e3efa4db3ece1094e0490bdf8f16882391284cc4350101730dc46de6e1fc6efefe5c1367db89418effa9a353aafa72d22bda5b0525c160374b8e5c6d667f1ff13262a66749917a2c98bb33099d1e489043f66ab34d112923c765a7b19e4807aa8f708ec6a723dce5fcdb024d51d72ff23d4929da8aaf42706c457e95a7763ed72d9e3e81ac817a53e7c22d7757b233fb762e9a5fb26ffcd6b569d125064bd4e29c7c83bd35c006807b8d2385707d231a32b6be9ec1304108eb3b450b45169684821a8e3d1289db53de4a871fca1a9ad4dc6858bf79e1e78a1583c184a123d199e0e6af88788fa20eaf52599d749b4bb8e70e407fcecdd7491bfb02252b16db28ff1876830f64bb2824523c7a591ea8069649f1eaefb734489cddc9f72a33eba21f34ad0045081ef53f3ccd5e73caa77e719a9ec4bd2712c12cddd70f6594ef5c3e724e62b71f7fffc807893afe45625f4bcf4d9304d8ae6d9a014c677557b7912769570590e047e1560f14f6b908d68edd14d3d3bd29bf61eaaf0cbba22606f41e4a62cc9c6fa0e18cde0a4d8b2a6efa103e555426f803b2b09ebf189c02288106e8ec2a33819253a277347193ef962999daf80329fca2bd131febfac8c815209d8af903f9a8043b85bac51b86064b64380fc809ee375a091014eb591a174c759d2db7438ab744d854ba13590845cd9b31fff5e88913f860958c0d9c015e0943b6bc925631bd01c2f7cebb9f95eb8d3dadcb5d45403f53cc16f65f004ec9541d7c8afaab1bd5690c71686041d7d4703fea116817a219b545c6c93eac71b6e8c63ffac10750246beeafbcb5aece7f77d6473445b247cbc786f9b5de9561ca8d464eefaa8b62146d8eb7a5e0db7dfd7b49b9732e8c07925354a5c4f6f6f32707d4ebf17caf5dffb7bf0b8e03b7b514f832ce7950888efca6ec70e94b70ccaa1ba15db6a69fe5a1249c6de4a75c36e5936c78719c3a3b5ca559b94928d3ba9b9a259a27a09f2706e19e98156c3cd1f8ba5369c76484b23b187080034f6c91c5dd79027691758b688b41cb3d8c430c4d12c3a3388c69b3878efa4225df1aa5dc286918b4bd2ba8909374eeb9117d1a24793bf9745a538772c5edfe3dd901b52b6f10583b086fce1b9332169d15291be89e3186d449748c035f7f9033ec0265a96e50269a9ae0a6442865971f66b248bd6fcfd57f7a90d5286d87e9b1e2e0c5a9a777efbeb8541702f3ebd8352f38b309d023903fda9a43975d096b809d0b0e69a09a7e6774739525889391722269c19aa6786f8ab63ad670c0e49ce29d684ba57137a41ddb07a70dfc6ff4f92349b62f096671aa4aaa78940ebf9eb94c1cb3ee76bad5cf762d1a823efb69cd40e2db902a773a6efb5dc9e767cb4ea5d00f62d8ecd89dcc9300f3531da54f8b50da9700c0eeb858cbb76d8e1a3bdf8a55284635cf19ab9062c0eb45db3071769773093b06c14310b8e7274a4da793d9b3da46304417c6f37754fb8cad4aa7c3585f080090a71f2045f7a72924a44602f73041685e3b5e3d18d42bd1dbb439a48df44732449f501c8224f49fa4bdf1a4bc67115200258c67d5ab4dd6ea6555a55178cb52e755424c03f8946acf09e237367d0108274dad8beaf570ada3ce71cbc275df7fa98aabe67f168d4a6a4e5ccf1f941fa961e5733192065e425e6fa152916be7c37cb86ceacf22d36e93f624d28f8514437657561c36adbfe522c6657e95c91a2e38302e035c7dbf6ed7e4c05fc33409e3641569b71d585c81a6725a515c86245b0abb52ee5421fd993f8e8e9afc1d85b3a11da45ef8b059922b882087e68c0ed9a1488a48ca9e1d909f947a9a49510fa361a1e9e4b0e0ed09e9e5bc001685d20183aede2b772a9014fd2e4ef630e925e579931eb195d05f326af0e1d246047d542b0173eba6cb5bb9cc1dd919be32d16f9b5c540e472ab4881393770322d78c8b8df99ae6ba5d1d12c3e9a22ea606a43b623f904bbcd214289ce5a7f86152669f39ad22f7ff77f8cf2c34025ecd281e4dcfcf2446c7265ab5af016dc28268518f793664edc1672eccc94821843257158f3a6b76243fe625c75a6c2b530b438ee566069730b77a441dee8d47038aa433bac8b698a377f1a347016857e3c985ceaf5cd4a01ff1f4c91c654355f7b9a82c9592aed92df6fc2ffa093388b2e4b24c8f1a13c8ef0970456752c9426ca49a7b859476180175e4215b8c0962bb7c25e1391b9c0fe44179c754d5378a8d0f785d"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)
write$fb(r2, &(0x7f0000001280)="e5d431ece969035f7a6e4a7b37fb8c394d6dd791d6ab921137ea3d94708dc86dd831df6d0df56f75012fa76c2ade6807d0a254ed123bb6e9cb5c6badfa8eae0735e2825fd64263fb38cce3e89f28a2bac4db98ea3acb2a49d38466d88f53155a63ed1feca76abbc5ff73a1a52a2a93ba51b5059d3a980e3e19311eed72fcfea9fce47cb87a1dd351f4d13da462d10c4bb632149182262727e8ec60590a786923dc44749d17b9043c0d955e387677e82e2f95cf0532254f36278c0795e662a16ba84dfe99a850c96bc2f02d061737f8f6c2e7702fff9cc955672eb748d736bec8b3b6c37a747f3453f8", 0xe9)

17:38:52 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)

17:38:52 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0xffffffff})

17:38:52 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0xe, 0x80800)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
timerfd_gettime(r0, 0x0)
r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r2, 0x40044620, 0x0)

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 3:
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080)=0x1)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:52 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r1, 0x9)
r2 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r2, 0xab00, r3)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)

17:38:52 executing program 4:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xfffffffa, 0x8, 0x9, 0x0], 0x4, 0x400, 0x0, <r0=>0xffffffffffffffff})
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f00000000c0)=""/38)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r1, 0x0)
write$fb(0xffffffffffffffff, &(0x7f0000000100)="f358ddad1102e4a916f8f745d45855e71d78dc7ce46316d1586f1d892fa7d6e85ab8b5f1d6de2e6eecc3cfdbffbddfb48620a77f8fb7132856", 0x39)

17:38:52 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "6064ce2d7c8d37338e887dce4f953a416010307ab64d0e28370d550169d0509507e3fa375ddb5babf05d3b6112b6f997c4e62f22eecc34c2e285e3d620c73ff48346bd3b6968366a3fdc4846cf53dd77cb14b42efa9d0e3a434a30579d456764643b562f716ca2849c09e2aae8b8058a204532f420d243928265e7f943fbf20d7d9a865d31d0d3df2784904f05f0779c09c9d451bc152e2f6d7540c2b5367e9dfed99b206655cce8d4b8fbe5fd2d0bc3f6682db726b56054d348b787ae5502fbc87e840fec9631508d2b938281768e1ce2d389411920857b052d3b7b1d5a63993f14c8d802bf1705f92b814d9de775c0cb3e4dc3153c06962b1089bd1f3f0d5f", "6978fbce2b6b1d371684644d628cda1681de6c1700f730da6bd91501b02ba15704e0bad97d9125bb52224dff4ec06d352488c97049d03f0f787a24a214258afd24d37e89c6d327ac1941209f99fb6c48a6a92e47b69f63d43617b474e8984710fd7bed9a4c5aa7f1ede312c2a0a3ab209050c63d2b4a7ab4127234b92b0197a85bfef84e8a9aa35b933c34a36cb209a902c5655990998d75d31b7935e87fa66ebdc83172a2814ab1c9996648832a75ddbf34ea429586061cb77cefe99901e0d7534a21f721055ebf68f6f06fb62ed41f3f7e3530c5bbb8ba6180d423bb0d9fde1041268cf988d4eeb0f321fab1804138fc1af8aec36d5abb3c33d98b747a96e7d0fe9c263ebb43527588bb46b9dd568121b0e0455bce28fcc61afa735bc08f770460dfa6a06b810f56e08991d5008beb5fa06b79b4c404d26017fb316b0cc3bf430e77ec35ab3a03f5d6613ed95d501f766b0effd4282ce4014ca851fffec99ac534e162d63f1c3223cc52f6d5f8c9c1c64a8a16d15ab0a85abe34a7ca839de27e6cab712e8886dbc6c96ccc7e1230b9962733ba31107e797c5b7b2827b27044136bfbcf986de2d44526f9f101fc34d5695bd76bb5ecb2a24e0f01cbacbf80a44f2bd66fde9f68b1056f827a0ade34d4f8268db47a87ec570263e8feec51b531500f521457494c08bf51f7702d85e1f19a257056f96fc996a4e771bff88a1b629e51e6e0827c6840b86a3e9d82dda74e0d865ff0f98772cb01ca8ab70f3861666db7e130d28761ab7e3da917562f49d19024e65babcda6fd2db14322d1e9c963ee1eb87173df455270478dbcfca95a87d580150e184535f82235e4c0c7e923ba97713a396bf160436866990bddd9154b78314ce2590719880c39ce0321774fcda2812308a7f71603caa8be836837b9c26b47dcf5426d97fe56eb6b80f2080f558c14b1f98e58bd98bb9cfa152494fb17ee41b2b26efc4119ebf99be18a480d315157f524c65cdea08561d1a16e57df11f5156902b959537a243929ad7ba1878fd3f074184f1ee28094370754b1f5fbb7f6b569e2aee5bf1f233986e0f0d4f49ebacc9812d8442092300b2ff5e96e68db9689947c66899820bda854d89f62b4fb982f7e80f55747dbc1f13a41e5e357a0e4a3e7a7ec8b41c32b52616424f60d5a12b7b0e0e380bc56f04fabf4a31321c57ee7cd7bdece9a82854ad3013693902b8571a654ca5b98aa80de7b9e9e1e6a446b77b7950794ee265e63daf5cc6d5119ab58d8ec4ddb17706895caa303ac63af6e0dfbd8cdabc9761bc6d929902cf7fcd0e23411a07c708dd5b72945dd422885c19a148522ba3dbfe464eefa14ee2ec14ccfa389f28b2e65e53ef070da530ad37cdc6dc77e7605385fba099c250c3a5d7da186978a403419439006a8bfab5b1db706aaa529cd985fdb10602e07223a0e22f284014f91ba04461d2b88dd24a95df991374dff8ae66fa231d7dcb46a12b7076df8721bce3b9e903f225eb6d337ad2126e3f908e2af493ea9ef26939b15a8b036b73ff13893011423c38ee905e7a880820daa50ad17613e610fa47ebe75c01764c750f8470f53ecc4e755dedee19db1e462a0db3d2799750a958ad6ff84d7fb4da88a1c693f6c64077a3024153ee13d91b384baf3d84421abb79c8ccc1052ce267e6eb812fe39bea883d6d2eab3cc7ce6f14c57d57493c2b978f02e01fdc0f7fbd37f7683fea6257e70ccd42939a7f398b1fd900b133a9fb34111e82a21ad559fe414be9479d0e01d3e72d3decea5a55a96c805223e8b04af10f8b1cf01e732680039fee66553fbd62584c30239284fd5a5f3fe91aaa6fee2feb6d0ea56fbb5efb6feaadd2b6cd073d34534937b08cc706fb2cb6f495fd7b9ed9eff3d620a9d953e3217eb62438145fda11c8e520c5d1a196625b058b73b9b03b363dda4a1741895e6ee7040476d6e57f912e7990c49abe12ed99167ccfc409c86b893d97acd2f6557f82218e88baf4c7b6e2ea0697ae3f495155e2c6bbec56b9e26326f5199ee729704764ac993cd9f5aafae928e399ba25d3d5294838391aab9696315383e233abba8f080f4713e57160f98456838ae90db1464aa5c0900743c3a2542e4ffcc85ffd9a77c7bd0695744be4bd98fbb5077b1c0870b9496ba46ce9ecadb9f88d96c364576af13422ef4ee3bd955c28246ed23f43ba54ab7ead03972f1c486f8f35e977e2df790e4ee52d909dbbed2d722b63474af168a26da10f8516ef0f9a95308faf200898cefdd62ad495a5b1a11483b6800af4a3e53e17404c3569c75ffe21c69f8dfb59ed46623e1d80c3b9d32ac669570d5e0e278444a0b63259ea079421dfdfd142ff80c1f9e5359ef40fba0b0286e3aa76c56917bd6e01683d651a03223e5cda85f418e815454a40ddbefd4a798c2441bd8882ba3711e19256fa9f300eb9aa54ca681486ae788984b01c61da0c316f8cf8af5ff06c92e16937041b6e038ad4553d10e638430995178078076b3503ff2b2ec9e278706e411cf9da8b53abf30c4bec1c93d1a9019b8519758867926c30cb90972cdba1f23ef389a4cbd56c664a6f2e2cbc927b6a462ab98b71eaaf1efa39268964425003b032b881372bc3775c9ee7ff7a7654ce3d7201496533f1c0e1c318c8e3b00d6137d4a428d8212813a4e6602461479653707fd7fec4ba4d51afba385b380d31cf4cb2e08f08ce8aa10729c41b1564b897f9ede2d6b11e9f4e96c467407b1f9bd9e91bcfade90dfe33f599ceaed9c8f1cf26e6990346cba99489625609add9235b73248af4f08698d8733856245f7829c8405b331b854d42ec52b0d19a2c1e4f19f1c72c5cef683f8bb3911b715a44c81385db7fdeb25aa754d0b71be8fd4cf2257cbc1caa06ee84a55b63d7b806bc6e2b693a45dd6435797fc825842445be7d3f97dce89d57bc035ceb48cad7bb025d02ebc35a1d2fb4d31dac9504eebcb3d63f0c9a5909883a3a9ca971f0e38009b69be86dcbb4363ea6df8fdd48316b1ee33eaaeb2bf9c6fc0766184cb44cebc30ee11edd20dc4d470367576f4b0b930e5b2d829cc8378e0aa3c5447f23369a2d3ac26d08901df13431d1fc08826688b6644dbee8fd7d7bf1ae3e7eaf5d364e514a707f9ecd60c26cc47e3efa4db3ece1094e0490bdf8f16882391284cc4350101730dc46de6e1fc6efefe5c1367db89418effa9a353aafa72d22bda5b0525c160374b8e5c6d667f1ff13262a66749917a2c98bb33099d1e489043f66ab34d112923c765a7b19e4807aa8f708ec6a723dce5fcdb024d51d72ff23d4929da8aaf42706c457e95a7763ed72d9e3e81ac817a53e7c22d7757b233fb762e9a5fb26ffcd6b569d125064bd4e29c7c83bd35c006807b8d2385707d231a32b6be9ec1304108eb3b450b45169684821a8e3d1289db53de4a871fca1a9ad4dc6858bf79e1e78a1583c184a123d199e0e6af88788fa20eaf52599d749b4bb8e70e407fcecdd7491bfb02252b16db28ff1876830f64bb2824523c7a591ea8069649f1eaefb734489cddc9f72a33eba21f34ad0045081ef53f3ccd5e73caa77e719a9ec4bd2712c12cddd70f6594ef5c3e724e62b71f7fffc807893afe45625f4bcf4d9304d8ae6d9a014c677557b7912769570590e047e1560f14f6b908d68edd14d3d3bd29bf61eaaf0cbba22606f41e4a62cc9c6fa0e18cde0a4d8b2a6efa103e555426f803b2b09ebf189c02288106e8ec2a33819253a277347193ef962999daf80329fca2bd131febfac8c815209d8af903f9a8043b85bac51b86064b64380fc809ee375a091014eb591a174c759d2db7438ab744d854ba13590845cd9b31fff5e88913f860958c0d9c015e0943b6bc925631bd01c2f7cebb9f95eb8d3dadcb5d45403f53cc16f65f004ec9541d7c8afaab1bd5690c71686041d7d4703fea116817a219b545c6c93eac71b6e8c63ffac10750246beeafbcb5aece7f77d6473445b247cbc786f9b5de9561ca8d464eefaa8b62146d8eb7a5e0db7dfd7b49b9732e8c07925354a5c4f6f6f32707d4ebf17caf5dffb7bf0b8e03b7b514f832ce7950888efca6ec70e94b70ccaa1ba15db6a69fe5a1249c6de4a75c36e5936c78719c3a3b5ca559b94928d3ba9b9a259a27a09f2706e19e98156c3cd1f8ba5369c76484b23b187080034f6c91c5dd79027691758b688b41cb3d8c430c4d12c3a3388c69b3878efa4225df1aa5dc286918b4bd2ba8909374eeb9117d1a24793bf9745a538772c5edfe3dd901b52b6f10583b086fce1b9332169d15291be89e3186d449748c035f7f9033ec0265a96e50269a9ae0a6442865971f66b248bd6fcfd57f7a90d5286d87e9b1e2e0c5a9a777efbeb8541702f3ebd8352f38b309d023903fda9a43975d096b809d0b0e69a09a7e6774739525889391722269c19aa6786f8ab63ad670c0e49ce29d684ba57137a41ddb07a70dfc6ff4f92349b62f096671aa4aaa78940ebf9eb94c1cb3ee76bad5cf762d1a823efb69cd40e2db902a773a6efb5dc9e767cb4ea5d00f62d8ecd89dcc9300f3531da54f8b50da9700c0eeb858cbb76d8e1a3bdf8a55284635cf19ab9062c0eb45db3071769773093b06c14310b8e7274a4da793d9b3da46304417c6f37754fb8cad4aa7c3585f080090a71f2045f7a72924a44602f73041685e3b5e3d18d42bd1dbb439a48df44732449f501c8224f49fa4bdf1a4bc67115200258c67d5ab4dd6ea6555a55178cb52e755424c03f8946acf09e237367d0108274dad8beaf570ada3ce71cbc275df7fa98aabe67f168d4a6a4e5ccf1f941fa961e5733192065e425e6fa152916be7c37cb86ceacf22d36e93f624d28f8514437657561c36adbfe522c6657e95c91a2e38302e035c7dbf6ed7e4c05fc33409e3641569b71d585c81a6725a515c86245b0abb52ee5421fd993f8e8e9afc1d85b3a11da45ef8b059922b882087e68c0ed9a1488a48ca9e1d909f947a9a49510fa361a1e9e4b0e0ed09e9e5bc001685d20183aede2b772a9014fd2e4ef630e925e579931eb195d05f326af0e1d246047d542b0173eba6cb5bb9cc1dd919be32d16f9b5c540e472ab4881393770322d78c8b8df99ae6ba5d1d12c3e9a22ea606a43b623f904bbcd214289ce5a7f86152669f39ad22f7ff77f8cf2c34025ecd281e4dcfcf2446c7265ab5af016dc28268518f793664edc1672eccc94821843257158f3a6b76243fe625c75a6c2b530b438ee566069730b77a441dee8d47038aa433bac8b698a377f1a347016857e3c985ceaf5cd4a01ff1f4c91c654355f7b9a82c9592aed92df6fc2ffa093388b2e4b24c8f1a13c8ef0970456752c9426ca49a7b859476180175e4215b8c0962bb7c25e1391b9c0fe44179c754d5378a8d0f785d"})
timerfd_gettime(r0, 0x0)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)

17:38:52 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r1, 0xab00, r2)

17:38:52 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000040)=""/76)
ioctl$SIOCPNDELRESOURCE(r0, 0x89ef, &(0x7f00000000c0)=0x100)

17:38:52 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
timerfd_gettime(r0, 0x0)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)

17:38:52 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
socket$caif_stream(0x25, 0x1, 0x1)
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0xfffffff7)
geteuid()

17:38:52 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r1, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "6064ce2d7c8d37338e887dce4f953a416010307ab64d0e28370d550169d0509507e3fa375ddb5babf05d3b6112b6f997c4e62f22eecc34c2e285e3d620c73ff48346bd3b6968366a3fdc4846cf53dd77cb14b42efa9d0e3a434a30579d456764643b562f716ca2849c09e2aae8b8058a204532f420d243928265e7f943fbf20d7d9a865d31d0d3df2784904f05f0779c09c9d451bc152e2f6d7540c2b5367e9dfed99b206655cce8d4b8fbe5fd2d0bc3f6682db726b56054d348b787ae5502fbc87e840fec9631508d2b938281768e1ce2d389411920857b052d3b7b1d5a63993f14c8d802bf1705f92b814d9de775c0cb3e4dc3153c06962b1089bd1f3f0d5f", "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"})
timerfd_gettime(r0, 0x0)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)

17:38:52 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x100, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 4:
ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f0000000000)=""/96)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

17:38:52 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = getpgid(0xffffffffffffffff)
capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0xa16, 0x83e, 0x9, 0x27, 0x11a9, 0x5})

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r0, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000280)={0x0, 0x0, "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", "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"})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)

17:38:52 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f00000000c0)=""/184)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

17:38:52 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000000c0)={0x5, 0x407, 0x3, 0x20, 0x20a, 0x3ff})

17:38:52 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r0, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000180)={'sit0\x00'})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)

17:38:52 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)

17:38:52 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r0, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

17:38:52 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = gettid()
capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0x7fefbf48, 0xdc, 0x7, 0x80, 0x382, 0x9})

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/201)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x7fffffff, 0x7, 0x3f1c000, 0x9, 0x956d, 0x4, 0x1000000, 0x9, 0x1], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000540)=0x100000000)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000))

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)

17:38:52 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)

17:38:52 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

17:38:52 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x400, 0x70bd30, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc002}, 0x20008040)

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:52 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)

17:38:52 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

17:38:52 executing program 3:
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
timer_create(0x7, &(0x7f0000000000)={0x0, 0x3, 0x2, @thr={&(0x7f00000000c0)="54ca2acc0b54a87048cb274d13735f0cffe3d119dca581a4d5a4bf123799b96ab96191044c7f6155243623b09fdd7a30c195540d1cb8e0ecde7f59308fa31f65c2af4284ff834a1febc7e9800035ab0398ee8884e2cd", &(0x7f0000000140)="2f6909e6d4975004d86f51114c2998b0027744509bbb9ec37015cbf32adf0e933f9c99796cfee79e06bee1fd54c646652571d78995f27879a49af36e8dd3d9b53f4be644394b4c77931b136a5cd76d1d8f455ffbb8c7228be88c678dc71c4bf24ebc89b5cf46309827c02fa9731d3f2c530fd7c384d69187d6494fb24d1796592068376b7ee9012b18a3c43cac81fe2434b691fb0723e7ead58fc71fce61e5f43b14252104791f9174733658ea39570a73f436d7acf77565156fae46a5cc10480772"}}, &(0x7f0000000240))

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000021c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040))
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_STATFS(r1, &(0x7f0000002140)={0x60, 0x0, r2, {{0xffff, 0x1, 0xffff, 0x9, 0x80, 0x3ff, 0x8, 0x1}}}, 0x60)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r4 = socket$phonet(0x23, 0x2, 0x1)
bind$phonet(r4, &(0x7f0000000000)={0x23, 0x0, 0x4, 0xb7}, 0x10)
timerfd_gettime(r3, 0x0)

17:38:52 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

17:38:52 executing program 2:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)

17:38:52 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'vlan0\x00'})
timerfd_gettime(r0, 0x0)

17:38:52 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r2, &(0x7f0000002500)={0x18, 0x0, r3, {0x9f}}, 0x18)
r4 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:38:52 executing program 2:
syz_open_dev$ndb(0x0, 0x0, 0x4000)

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:52 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

17:38:52 executing program 2:
syz_open_dev$ndb(0x0, 0x0, 0x4000)

17:38:52 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xffffffff, 0x100004, 0x0, 0x7, 0x1ff, 0x2, 0xef, 0x8], 0x4000000000000167, 0x800, 0x0, <r1=>0xffffffffffffffff})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000240)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_GETXATTR(r5, 0x0, 0x0)
ioctl$EVIOCGUNIQ(r2, 0x80404508, &(0x7f0000000140)=""/10)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000180)=""/148)
r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r6, 0x0, 0x0)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r7, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r6, 0x4008af30, &(0x7f0000000280)={0x2, r7})
r8 = geteuid()
write$FUSE_DIRENTPLUS(r4, &(0x7f0000002340)={0x238, 0xfffffffffffffff5, 0x0, [{{0x3, 0x0, 0x80d, 0x9, 0x8, 0x8000, {0x6, 0xfffffffffffffff8, 0x436a, 0x5, 0x8, 0x9, 0xee5b, 0x7, 0x3753c00, 0x6000, 0xd70, 0x0, 0xee00, 0x2, 0x400}}, {0x5, 0x9, 0x29, 0x1ff, '/sys/kernel/debug/binder/transaction_log\x00'}}, {{0x6, 0x2, 0xfffffffffffffff7, 0x7fffffff, 0x8, 0x96b, {0x1, 0x401, 0x1, 0x0, 0x6, 0x3, 0x1, 0x7, 0x8, 0x2000, 0x2, 0xee01, 0x0, 0x0, 0x77e5}}, {0x5, 0x4, 0x0, 0x1}}, {{0x0, 0x0, 0xfffffffffffffd5f, 0x3, 0xfff, 0x7fffffff, {0x1, 0x2, 0x1, 0x7f, 0x4, 0x0, 0x8, 0x7, 0xd4, 0x4000, 0x5, r8, 0xee00, 0x1, 0x9}}, {0x0, 0x100000000, 0x29, 0x1000, '/sys/kernel/debug/binder/transaction_log\x00'}}]}, 0x238)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0), 0x0, 0x80800})
timerfd_gettime(r0, 0x0)

17:38:52 executing program 3:
ioctl$TUNSETVNETHDRSZ(0xffffffffffffffff, 0x400454d8, &(0x7f0000000080)=0x7c)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:52 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:52 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

17:38:52 executing program 2:
syz_open_dev$ndb(0x0, 0x0, 0x4000)

17:38:52 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:52 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:38:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000002400)=""/162)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x3, 0x1, &(0x7f0000000100)=""/120, &(0x7f0000000180)=""/55, &(0x7f00000001c0)=""/113, 0x5000})

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 2:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_create(0x5, 0x80800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')
r2 = timerfd_create(0x5, 0x80000)
timerfd_gettime(r2, &(0x7f0000000040))

17:38:53 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, 0x0, 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

17:38:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x3, @fd, 0x34})

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 2:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)

17:38:53 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000080))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:53 executing program 0:
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r0, 0x40044620, 0x0)

17:38:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 2:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)

17:38:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:53 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x2})
r0 = getpgid(0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhost-net\x00', 0x2, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000140))
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)={0x6, 0x0, 0x7ea, 0x0, 0x800, 0xfffffffc})

17:38:53 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)

17:38:53 executing program 5:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd})

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x4000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x40100, 0x0)
ioctl$TUNGETDEVNETNS(r1, 0x54e3, 0x0)
openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x440600, 0x0)
recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x102, &(0x7f0000000040)={0x23, 0x4, 0xd2, 0x4}, 0x10)

17:38:53 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_create(0x5, 0x80800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')
r2 = timerfd_create(0x5, 0x80000)
timerfd_gettime(r2, &(0x7f0000000040))

17:38:53 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000080)={0x3000000000000000, 0xe7a})
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000180)={0x2020}, 0x2020)
capset(&(0x7f00000000c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0x6, 0x5, 0x3, 0x3, 0x5, 0xffffffff})

17:38:53 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_create(0x5, 0x80800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')
r2 = timerfd_create(0x5, 0x80000)
timerfd_gettime(r2, &(0x7f0000000040))

17:38:53 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 3:
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)

17:38:53 executing program 0:
openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
ioctl$EVIOCGBITKEY(r0, 0x80404521, &(0x7f00000000c0)=""/247)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r1, 0x0)

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 3:
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x0, 0x8, 0x8bb, 0xfff})
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x319002, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x4)

17:38:53 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_create(0x5, 0x80800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')
r2 = timerfd_create(0x5, 0x80000)
timerfd_gettime(r2, &(0x7f0000000040))

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
timerfd_gettime(r0, 0x0)

17:38:53 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_create(0x5, 0x80800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')
r2 = timerfd_create(0x5, 0x80000)
timerfd_gettime(r2, &(0x7f0000000040))

17:38:53 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x20, 0x0, 0x0, 0x53, 0xb, 0xfffffffe})

17:38:53 executing program 2:
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000100)=""/4096)
capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x493, 0x9, 0x20, 0x80000000, 0x6, 0xa3})

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_ATTR(r1, &(0x7f0000004140)={0x78, 0xfffffffffffffff5, r2, {0x4, 0x7fffffff, 0x0, {0x2, 0x9, 0xd685, 0x2, 0x5, 0xb07, 0x4a5e, 0x9, 0xe3, 0x1000, 0x400, r3, 0xffffffffffffffff, 0x2, 0x3e}}}, 0x78)

17:38:53 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)

17:38:53 executing program 2:
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x1)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000240))
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f0000000240)=""/23)
capset(&(0x7f0000000180)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000380)={0x1, 0x401, 0x2, 0x7ff, 0x80000010, 0x7fffffff})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', r0)
clock_gettime(0x0, &(0x7f0000000280)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f00000002c0)={0x7fff, 0x0, 0x4, 0x70000, 0x5, {r3, r4/1000+10000}, {0x2, 0x2, 0x7, 0x1f, 0x0, 0xff, "0b0e60ec"}, 0x9e, 0x4, @fd=r1, 0xf027, 0x0, <r5=>r1})
fcntl$getown(r5, 0x9)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="200b1f66", @ANYRES16=r2, @ANYBLOB="000229b57000ffdbdf25170000000c0025800500020000000000"], 0x20}, 0x1, 0x0, 0x0, 0x54}, 0x4008000)
capset(&(0x7f0000000080)={0x20080522, 0xffffffffffffffff}, &(0x7f00000000c0)={0x23, 0x80000000, 0x7ff, 0x100004, 0x9f2d, 0x37f})

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000011c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001140)={0x11, 0x3, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0xfffffff9}, @jmp={0x5, 0x0, 0xde03078a853801b4, 0x1, 0x8, 0x40, 0x8}], &(0x7f0000000040)='GPL\x00', 0x1, 0x1000, &(0x7f00000000c0)=""/4096, 0x41000, 0x5, [], 0x0, 0x0, r0, 0x8, &(0x7f00000010c0)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000001100)={0x1, 0x6, 0x6, 0xff}, 0x10}, 0x78)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
socketpair(0x25, 0x5, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001200)={0xb, 0x7, 0x101, 0x0, 0x200, 0x1, 0x1, [], 0x0, r1, 0x1, 0x5, 0x5}, 0x40)

17:38:53 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_create(0x5, 0x80800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')
timerfd_create(0x5, 0x80000)

17:38:53 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000002400)=""/162)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x3, 0x1, &(0x7f0000000100)=""/120, &(0x7f0000000180)=""/55, &(0x7f00000001c0)=""/113, 0x5000})

17:38:53 executing program 1:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

17:38:53 executing program 2:
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:53 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x9)

17:38:53 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_create(0x5, 0x80800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:53 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000040)=[0x9, 0x1, 0x7, 0x6, 0x9], 0x5, 0x80800, 0x0, <r3=>0xffffffffffffffff})
ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f0000000100)={0x0, 0x8001})
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000000))
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x8)

17:38:53 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000002400)=""/162)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x3, 0x1, &(0x7f0000000100)=""/120, &(0x7f0000000180)=""/55, &(0x7f00000001c0)=""/113, 0x5000})

17:38:53 executing program 1:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

17:38:53 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000, 0x0, <r3=>0xffffffffffffffff})
r4 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f0000002400)=""/162)
ioctl$VHOST_SET_VRING_ADDR(r3, 0x4028af11, &(0x7f0000000240)={0x3, 0x1, &(0x7f0000000100)=""/120, &(0x7f0000000180)=""/55, &(0x7f00000001c0)=""/113, 0x5000})

17:38:54 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x80000001, 0x1})
capset(&(0x7f00000000c0)={0x20080522, 0xffffffffffffffff}, &(0x7f0000000100)={0x40, 0x3f, 0x4, 0x3, 0x0, 0x10001})
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)

17:38:54 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:54 executing program 1:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r0)

17:38:54 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, r1, {{0x1f, 0xaaa, 0x7fff, 0x1d2c1005, 0xcf, 0x5, 0x8, 0x8001}}}, 0x60)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_OPEN(r2, &(0x7f0000002100)={0x20, 0x0, r1, {0x0, 0x6}}, 0x20)

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000})
r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:54 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:38:54 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0x100, 0x4, 0x0, 0x80000001})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)=<r0=>0x0)
capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x7, 0xbd, 0x4, 0x0, 0xb67, 0x8})

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000})
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
fcntl$getown(r0, 0x9)
timerfd_gettime(r0, 0x0)

17:38:54 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:38:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:54 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 3:
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x0, 0xfffffffc, 0x0, 0x9})

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000})
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 1:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:38:54 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000c7ce4de24e2979f40424101da6ff6e731897b1ed2acc42e9824b63ed2a9a475b499e1b10c1cb0b2d0c33afa0e98026e62ccf2b99e18e651a8e2be61bc80460f1fc18bc911225e560040277b3a7c7c4386583f3513c1adbd0d6f124967b6ea2ba8d12971d0d176e1a5a6c006d4e8164885cdf7283822ba4b6e26b3da2ff357c0371e905bf11225aff85278c029257366a359305390c80", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf251400000008001c00", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8800)
timerfd_gettime(r2, 0x0)

17:38:54 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:54 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x200, 0x0)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/185)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0xe8e8, 0x56b9, 0x62, 0x7, 0x51e, 0x1], 0x6, 0x80000})
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, r1, {{0x1f, 0xaaa, 0x7fff, 0x1d2c1005, 0xcf, 0x5, 0x8, 0x8001}}}, 0x60)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_OPEN(r2, &(0x7f0000002100)={0x20, 0x0, r1, {0x0, 0x6}}, 0x20)

17:38:54 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = fork()
write$cgroup_pid(r0, &(0x7f0000000000)=r2, 0x12)
timerfd_gettime(r1, 0x0)

17:38:54 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0xfffc, 0xbfc6, 0x7ffffffe})

17:38:54 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:54 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000c7ce4de24e2979f40424101da6ff6e731897b1ed2acc42e9824b63ed2a9a475b499e1b10c1cb0b2d0c33afa0e98026e62ccf2b99e18e651a8e2be61bc80460f1fc18bc911225e560040277b3a7c7c4386583f3513c1adbd0d6f124967b6ea2ba8d12971d0d176e1a5a6c006d4e8164885cdf7283822ba4b6e26b3da2ff357c0371e905bf11225aff85278c029257366a359305390c80", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf251400000008001c00", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8800)
timerfd_gettime(r2, 0x0)

17:38:54 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000000)={0x1, 0x209})

17:38:54 executing program 2:
openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:54 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000c7ce4de24e2979f40424101da6ff6e731897b1ed2acc42e9824b63ed2a9a475b499e1b10c1cb0b2d0c33afa0e98026e62ccf2b99e18e651a8e2be61bc80460f1fc18bc911225e560040277b3a7c7c4386583f3513c1adbd0d6f124967b6ea2ba8d12971d0d176e1a5a6c006d4e8164885cdf7283822ba4b6e26b3da2ff357c0371e905bf11225aff85278c029257366a359305390c80", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf251400000008001c00", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8800)
timerfd_gettime(r2, 0x0)

17:38:54 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
capset(&(0x7f00000020c0)={0x20080522, r0}, &(0x7f0000002100)={0x4, 0x1000, 0x5bca, 0x8, 0x6, 0x80000001})

17:38:54 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000c7ce4de24e2979f40424101da6ff6e731897b1ed2acc42e9824b63ed2a9a475b499e1b10c1cb0b2d0c33afa0e98026e62ccf2b99e18e651a8e2be61bc80460f1fc18bc911225e560040277b3a7c7c4386583f3513c1adbd0d6f124967b6ea2ba8d12971d0d176e1a5a6c006d4e8164885cdf7283822ba4b6e26b3da2ff357c0371e905bf11225aff85278c029257366a359305390c80", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf251400000008001c00", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8800)
timerfd_gettime(r2, 0x0)

17:38:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000000000)='SMC_PNETID\x00', r0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
syz_genetlink_get_family_id$smc(&(0x7f0000019680)='SMC_PNETID\x00', r1)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000100)='SMC_PNETID\x00', r0)
sendmsg$SMC_PNETID_GET(r2, &(0x7f0000019580)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x38, r3, 0x10, 0x70bd2d, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c080}, 0x40000)
write$proc_mixer(r2, &(0x7f0000000340)=ANY=[@ANYBLOB="b3a722519c4ce7fc4d617374657220506c61796261636b20537769746368272030303030303030303030303030308c459b8c4f554a274f4c554d450a524144494f3b0903494572656874af9bb17e5820274361707475726520566f6c756d65272030303030303030303030303030303030303030300a53594e5448202753796e7c6820439d3800000000000030303030303030303030303030303030303030300ad22e087dd8780e0f5ebcbcf3efe47625b39b049e7083fc09ae2eb9ed1d785ba776aa05b843965a5f2f12efe395661ccab7a0045fdfd64176dfde0393eaf0c15edb9d897d54dbce0533e58e5aedd8ce1e77cad8b71d6af286ab84807bcbbc91ce4c9284904a2bf602299193c03cbb2cec5faf8642a3fcadf6bc8fb997addc9a84c25d41749b29d047dc7b9b206f68e60a51c2301ed6dca907f7f9d12b912828a8d4cbb63ff9bdfb34273ba28119109e6a1a2b3c1a58778e7daecb10de530e12897556c98fb332dcd0da853744c773c9ac3fb91971685540f8d3ad7930c495dfa794bd9a191af2e0eebc2f39a29cadb87f6ddb9f51c2582e817d993b1008cc249a300496040ccb2ed17333a3f4dab1f41b0c2c6e06c18775ee42bbc247b32e27991e997731dde65029be2c15404753f81e41a1aa766b64dd5491dab8860b1bddac487a88e48d456f85cb4e3cc9cffaa8fa10793ecd4415787c4c4041c108aed3c21f9c9aba022590d0c858b8926718d1a11c8f"], 0x93)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000002c0)=@bpf_ext={0x1c, 0x2, &(0x7f0000000180)=@raw=[@btf_id={0x18, 0x6, 0x3, 0x0, 0x3}], &(0x7f00000001c0)='GPL\x00', 0x2, 0x19000, &(0x7f0000000580)=""/102400, 0x40f00, 0x0, [], 0x0, 0x0, r4, 0x8, &(0x7f0000000240)={0x3, 0x5}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xd, 0x3, 0x101}, 0x10, 0x2a435, r2}, 0x78)
r5 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_RMID(r5, 0x0, 0x0)
r6 = geteuid()
getgroups(0x7, &(0x7f00000195c0)=[0x0, 0x0, 0xee01, <r7=>0x0, 0xffffffffffffffff, 0xee00, 0xee00])
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000019600)={{0x0, r6, 0xffffffffffffffff, 0x0, r7, 0x32}, 0x1, 0x44713de3, 0x0, 0x0, 0x0, 0x0, 0xfffa})
socket$caif_stream(0x25, 0x1, 0x0)

17:38:54 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000140)=""/135)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x800000, 0x0, 0x0, 0x80000001, 0x0, 0x4000000})
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
capset(&(0x7f00000000c0)={0x399f1316, r1}, &(0x7f0000000100)={0x8, 0x1, 0x7, 0xfffffffa, 0x2})
ioctl$TUNGETFILTER(r0, 0x801054db, &(0x7f0000000200)=""/120)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000000300)={0x2020, 0x0, <r3=>0x0}, 0x2020)
r4 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r4}, 0x0)
write$FUSE_LK(r2, &(0x7f0000002340)={0x28, 0xffffffffffffffda, r3, {{0xffff, 0x7, 0x1, r4}}}, 0x28)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000080))

17:38:54 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
timerfd_gettime(r2, 0x0)

17:38:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
getpgid(0x0)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x2, 0x20000)

17:38:54 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 4:
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f00000022c0)=""/97)
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000180)={{0x0, 0x0, 0x80}})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f0000002200))
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000000c0)={0x0, @data})

17:38:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, 0x0)

17:38:54 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
getpgid(0x0)
timerfd_gettime(r2, 0x0)

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:54 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 3:
r0 = getpid()
capset(&(0x7f0000000000)={0x20071026, r0}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000401, 0x42})
r1 = semget(0x3, 0x4, 0x440)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
semctl$IPC_STAT(r1, 0x0, 0x2, &(0x7f00000002c0)=""/247)
bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)={&(0x7f0000000180)='./file0\x00', 0x0, 0x8}, 0x10)
capset(&(0x7f0000000200)={0x20080522}, &(0x7f0000000280)={0x216, 0x6, 0xc, 0x3f, 0x7ff})

17:38:54 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
r2 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r2, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:54 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x9, 0x4], 0x2, 0x80000})
openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x101000, 0x0)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x400, 0x0)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x181000, 0x0)
ioctl$TUNSETGROUP(r1, 0x400454ce, 0xee01)
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000180)={'veth0_virt_wifi\x00'})

17:38:54 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:54 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
timerfd_gettime(r2, 0x0)

17:38:54 executing program 4:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:54 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:54 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:55 executing program 3:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1c8, 0x801c0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/220)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0xfffffffc})

17:38:55 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001, 0x2})
timerfd_gettime(0xffffffffffffffff, 0x0)
timerfd_gettime(r0, &(0x7f00000000c0))

17:38:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd, 0x34})

17:38:55 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:55 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:55 executing program 0:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 3:
semop(0x0, &(0x7f0000000080)=[{0x3, 0x2}, {0x3, 0xffe0, 0x1000}, {0xec6bf20a4bc3ee94, 0x5, 0x800}], 0x3)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000100)={&(0x7f00000000c0)=[0x6, 0x2, 0xff, 0x8000, 0x3, 0xc7], 0x6, 0x80000, 0x0, <r0=>0xffffffffffffffff})
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000000140)=""/253)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:55 executing program 2:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "1cc309ec"}, 0x0, 0x0, @fd})

[  288.245730] binder: 5721:5729 ioctl 4018620d 20000040 returned -22
17:38:55 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:55 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

[  288.293840] binder: 5721:5729 ioctl 4018620d 20000040 returned -22
17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x0, 0x2)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f00000000c0)={0xf191, 0x9, 0x4, 0x70100, 0x80000001, {0x77359400}, {0x0, 0xc, 0x1, 0x80, 0x1, 0x7, "4cdbe6f0"}, 0x2, 0x3, @offset=0x9, 0x9, 0x0, r0})
timerfd_gettime(r0, 0x0)

17:38:55 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020, 0x0, <r0=>0x0}, 0x2020)
r1 = getpgid(0x0)
getpgrp(0xffffffffffffffff)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
capset(&(0x7f0000002100)={0x20071026, r1}, &(0x7f0000002140)={0x1, 0xa895, 0x9, 0x4, 0x4, 0xa4})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000021c0)='nl802154\x00', 0xffffffffffffffff)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f00000022c0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000002280)={&(0x7f0000002200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="080025bd7000fcdbdf25140000000c00060003000000030000000c00060001000000010000000c000600030000000000000008001d00", @ANYRES32=r3, @ANYBLOB="0c00060002000000020000000900010002000000c78f8e5114ab7c25812f6412d402ce7b666195224d50264b600f3c7e60a3539fdf4b7be13c"], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f00000020c0)={0x18, 0x0, r0, {0xb2}}, 0x18)

17:38:55 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x2)
mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x3ff)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x1001, 0x2})
timerfd_gettime(0xffffffffffffffff, 0x0)
timerfd_gettime(r0, &(0x7f00000000c0))

17:38:55 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = timerfd_create(0x0, 0x800)
timerfd_gettime(r1, 0x0)

17:38:55 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1c8, 0x801c0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/220)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0xfffffffc})

17:38:55 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = timerfd_create(0x0, 0x800)
timerfd_gettime(r1, 0x0)

[  288.425876] binder: 5753:5759 ioctl 4018620d 20000040 returned -22
17:38:55 executing program 3:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5)

17:38:55 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:55 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000040)=0x8000000)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1c8, 0x801c0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/220)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0xfffffffc})

17:38:55 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
capset(&(0x7f0000000080)={0x20071026, 0xffffffffffffffff}, &(0x7f00000000c0)={0x4, 0x5, 0x9, 0x7ff, 0x5, 0x3})

17:38:55 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:55 executing program 0:
r0 = syz_open_dev$evdev(0x0, 0x1, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1c8, 0x801c0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/220)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0xfffffffc})

17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000001180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="48d90000", @ANYRES16=0x0, @ANYBLOB="000325bd7000fbdbdf2502000000140002006d6163766c616e3000000000000000000900030073797a320000000005000400010000000900030073797a3000000000"], 0x48}, 0x1, 0x0, 0x0, 0x804}, 0x14)
r1 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0xffffffffffff4995, 0x2482)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f00000000c0)=""/4096)

17:38:55 executing program 3:
ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x2, 0x1})
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:55 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0xa33f)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 2:
r0 = syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1c8, 0x801c0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f00000000c0)=""/220)

17:38:55 executing program 1:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 3:
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x59], 0x1, 0x400, 0x0, <r0=>0xffffffffffffffff})
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f0000002180))
write$FUSE_LSEEK(r0, &(0x7f0000002140)={0x18, 0x0, r1, {0x7fffffff}}, 0x18)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:55 executing program 0:
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 1:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 2:
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x1c8, 0x801c0)

17:38:55 executing program 3:
r0 = semget(0x0, 0x3, 0x22)
semctl$IPC_RMID(r0, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0xffffffff})

17:38:55 executing program 0:
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 1:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:55 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5)

17:38:55 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd)
timerfd_gettime(r0, 0x0)

17:38:55 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000080))

17:38:55 executing program 2:
syz_open_dev$evdev(0x0, 0x1c8, 0x801c0)

17:38:55 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5)

17:38:55 executing program 0:
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGABS3F(0xffffffffffffffff, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:55 executing program 1:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$KVM_NMI(r1, 0xae9a)

17:38:55 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0x4})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f0000000080)={0x0, r0}, &(0x7f00000000c0)={0x2a, 0xed, 0x8, 0x2, 0x5, 0x4c})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000140)={0x9, 0x0, [{}, {}, {}, {}, {}, {}, {}, {}, {}]})

17:38:55 executing program 2:
syz_open_dev$evdev(0x0, 0x1c8, 0x801c0)

17:38:55 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})
ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, 0x5)

17:38:55 executing program 0:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0)

17:38:55 executing program 1:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:55 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:56 executing program 2:
syz_open_dev$evdev(0x0, 0x1c8, 0x801c0)

17:38:56 executing program 3:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:56 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})

17:38:56 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd)
timerfd_gettime(r0, 0x0)

17:38:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd)
timerfd_gettime(r0, 0x0)

17:38:56 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
clock_gettime(0x0, &(0x7f0000000100)={<r2=>0x0, <r3=>0x0})
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000001040)={0x2020, 0x0, <r5=>0x0}, 0x2020)
r6 = geteuid()
write$FUSE_ENTRY(r4, &(0x7f0000000200)={0x90, 0x0, r5, {0x1, 0x2, 0x6, 0x19, 0x0, 0x2, {0x6, 0xfa, 0x2, 0x3c2, 0x9, 0x6ec800, 0x6, 0x7, 0x5, 0x6000, 0xfffffffe, r6, 0xee01, 0x3, 0x6}}}, 0x90)
r7 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r7, 0x0, 0x0)
ioctl$VIDIOC_PREPARE_BUF(r1, 0xc058565d, &(0x7f0000000180)={0x101, 0xb, 0x4, 0x4000, 0x3f, {r2, r3/1000+60000}, {0x5, 0x8, 0xa4, 0x5, 0x5, 0xb5, "00fa00"}, 0x1, 0x2, @planes=&(0x7f0000000140)={0xf110, 0x9, @fd=r4, 0x8}, 0x6})
r8 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r8, 0x0, 0x0)
ioctl$TUNSETSNDBUF(r8, 0x400454d4, &(0x7f00000002c0)=0x1)
pselect6(0x40, &(0x7f0000001000), 0x0, 0x0, 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f00000000c0)=0x1c)
write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, 0x0, {{0x5, 0x1ff, 0x7fffffff, 0x1, 0x2, 0x1e, 0xffffffff, 0x9}}}, 0x60)

17:38:56 executing program 5:
capset(0x0, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})

17:38:56 executing program 2:
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x801c0)

[  289.216703] binder: 5879:5882 ioctl c0306201 20000100 returned -11
17:38:56 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd)
timerfd_gettime(r0, 0x0)

17:38:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd)
timerfd_gettime(r0, 0x0)

17:38:56 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1d, 0x12, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x1, 0x3, 0x3, 0x6, 0x2, 0x0, 0xfffffffffffffffc}, @alu={0x4, 0x1, 0x1, 0xa, 0xa, 0x93, 0xffffffffffffffff}, @map={0x18, 0x2, 0x1, 0x0, r1}, @call={0x85, 0x0, 0x0, 0x65}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0x40}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @btf_id={0x18, 0x5, 0x3, 0x0, 0x5}, @map={0x18, 0x0, 0x1, 0x0, r2}]}, &(0x7f00000001c0)='syzkaller\x00', 0x2, 0xff, &(0x7f0000000200)=""/255, 0x40f00, 0x1, [], 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x6, 0x1, 0x1f}, 0x10, 0xffffffffffffffff}, 0x78)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

[  289.257821] binder: 5879:5882 ioctl c0306201 20000100 returned -11
17:38:56 executing program 2:
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)

17:38:56 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd)
timerfd_gettime(r0, 0x0)

17:38:56 executing program 5:
capset(0x0, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})

17:38:56 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x3, 0x80000001, 0x0, 0x2})
capset(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f00000000c0)={0x8, 0x9c, 0x100, 0x0, 0x4})

17:38:56 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:56 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0xfffffffffffffffd)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r2, 0x400454d8, &(0x7f0000000100)=0x5)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000040)={'syzkaller0\x00'})
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))

17:38:57 executing program 5:
capset(0x0, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})

17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x1)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/fb0\x00', 0x8002, 0x0)
ioctl$FBIOBLANK(r1, 0x4611, 0x0)

17:38:57 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x8, 0x80000)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 2:
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)

17:38:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_create(0x8, 0x80000)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0xfffffffffffffffd)

17:38:57 executing program 5:
capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})

17:38:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_create(0x8, 0x80000)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)

17:38:57 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:57 executing program 2:
syz_open_dev$evdev(&(0x7f0000000080)='/dev/input/event#\x00', 0x0, 0x0)

17:38:57 executing program 3:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000040)={0x20, 0x0, r1, {0x0, 0x1}}, 0x20)
capset(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x80000001, 0x0, 0xfffffffc})

17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = timerfd_create(0x9, 0x800)
timerfd_gettime(r1, &(0x7f0000000000))

17:38:57 executing program 5:
capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})

17:38:57 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_create(0x8, 0x80000)

17:38:57 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0xccd, 0xae29})
getpgrp(0x0)
r0 = fork()
r1 = getpgid(r0)
getpid()
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000000c0)={0x8, 0x7, 0x4, 0x1, 0xf9f, 0x64d})

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:57 executing program 4:
timerfd_gettime(0xffffffffffffffff, 0x0)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x3, 0x3, 0x4, 0x10000, 0x3ff, {0x0, 0x2710}, {0x5, 0x2, 0x40, 0x6, 0x8, 0xf8, "41d215bc"}, 0x56, 0x3, @offset=0x5, 0x2})
syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2)

17:38:57 executing program 5:
capset(&(0x7f0000000000), &(0x7f0000000040)={0x0, 0x4, 0x0, 0x7f7, 0x7ff})

17:38:57 executing program 0:
timerfd_create(0x8, 0x80000)

17:38:57 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

[  290.382291] binder: 5965:5971 ioctl c0306201 20000100 returned -11
17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, 0x0)

17:38:57 executing program 0:
timerfd_create(0x0, 0x80000)

17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000080))

17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r1, 0xc058560f, &(0x7f0000000000)={0x7ff, 0x3, 0x4, 0x800, 0x40, {0x77359400}, {0x4, 0x1, 0xfe, 0x3f, 0x9, 0x7, "c407fdbe"}, 0x4, 0x4, @fd, 0x1000, 0x0, r2})

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

[  290.485578] binder: 5984:5989 ioctl c0306201 20000100 returned -11
17:38:57 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, 0x0)

17:38:57 executing program 0:
timerfd_create(0x0, 0x80000)

17:38:57 executing program 1:
r0 = timerfd_create(0x8, 0x80000)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, 0x0)

17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
fork()
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00', r1)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040804}, 0x14)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x814)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})
ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454cb, 0x0)

[  290.579274] binder: 5997:6002 ioctl c0306201 20000100 returned -11
17:38:57 executing program 0:
timerfd_create(0x0, 0x80000)

17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000080))

17:38:57 executing program 1:
r0 = timerfd_create(0x0, 0x80000)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7f7, 0x7ff})

17:38:57 executing program 0:
timerfd_create(0x8, 0x0)

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x11, r0, 0x80000001)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  290.679080] binder: 6013:6018 ioctl c0306201 20000100 returned -11
17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r0=>0x0)
capset(&(0x7f00000000c0)={0x20071026, r0}, &(0x7f0000000100)={0x7, 0x2, 0x24d8, 0xfffffe00, 0x7ff, 0x7fff})

17:38:57 executing program 1:
r0 = timerfd_create(0x0, 0x80000)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0xa9aa, 0x8b, 0x719a78f, 0x3ff, 0xab, 0x1f, 0x8001], 0x7, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000000c0))

17:38:57 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x7ff})

17:38:57 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
fork()
r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000180)='SMC_PNETID\x00', r1)
sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x50, r3, 0x100, 0x70bd27, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'syz_tun\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040804}, 0x14)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
sendmsg$SMC_PNETID_DEL(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x40, 0x0, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x814)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  290.794893] binder: 6031:6034 ioctl c0306201 20000100 returned -11
17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000080)={0x20, 0x0, 0x5, 0x0, 0xb17})

17:38:57 executing program 1:
r0 = timerfd_create(0x0, 0x80000)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 5:
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040))

17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000040)={'veth1_to_team\x00'})
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2)
write$FUSE_GETXATTR(r1, 0x0, 0x0)

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  290.894626] binder: 6045:6052 ioctl c0306201 20000100 returned -11
17:38:57 executing program 1:
r0 = timerfd_create(0x8, 0x0)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x9f5, 0x0, 0x8}, {0x9a7, 0x0, 0x9}]})

17:38:57 executing program 1:
timerfd_create(0x8, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:57 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0xccd, 0xae29})
getpgrp(0x0)
r0 = fork()
r1 = getpgid(r0)
getpid()
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
capset(&(0x7f0000000080)={0x20071026, r1}, &(0x7f00000000c0)={0x8, 0x7, 0x4, 0x1, 0xf9f, 0x64d})

17:38:57 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_ENTRY(r1, &(0x7f0000002100)={0x90, 0xfffffffffffffffe, r2, {0x2, 0x0, 0x2f7, 0x80000001, 0x1, 0x2, {0x2, 0xffffffffffffffff, 0x7, 0x5a, 0x100000000, 0x9, 0x20, 0x7, 0x1f, 0x8000, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x2c11}}}, 0x90)
timerfd_gettime(r0, 0x0)

17:38:57 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = timerfd_create(0x9, 0x800)
timerfd_gettime(r1, &(0x7f0000000000))

17:38:57 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:57 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = getpgrp(0xffffffffffffffff)
ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a)
capset(&(0x7f0000000240)={0x19980330, r0}, &(0x7f0000000200)={0xfffffffd, 0x1000001, 0xfffffffa, 0x52815ef6, 0x1f, 0x1})
ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000180)={0x2})
r1 = getpgrp(r0)
capset(&(0x7f00000001c0)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0xc2, 0x8001, 0x3f, 0xffffffff, 0x4})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14002300", @ANYRES16=0x0, @ANYBLOB="010025bd7000ffdbdf2554dd0000050012000b000000"], 0x1c}, 0x1, 0x0, 0x0, 0xfbd41e0e17c68dfd}, 0x40000)
timer_create(0x0, &(0x7f0000001300)={0x0, 0x27, 0x0, @thr={&(0x7f00000002c0)="679e7928cc407a171cf915aaeccfa69c8594dafa4eaa2530aff85ed2ad528bad138ac681aa9befd1d07b927204295ec25b91beb6dc73d9c62579d8fa6ccf31773c38db41e376ac97b8b944d83b5ba589fc792ca11e7d50037e2ab6a529b1fdf40820a241d0c7f8dd06104b68a4b07620d9d6bd29eac3cca7f9142c665c11112e01a1080430c11e78adec9f2f8ddaa342aa38b2aa6a356b8b89dc204212d7ba6c0e1cc817e9ae4af20706d825dc06d03e379c0dd1ad2d546cbcd00157c5abfd5f47b43899cd812baf687ea342bdc8446e6c6414fc428afb2d054d207d38aa8077588605545c12c87407ca3d8e6726a06e19130aa39b8433b5d14c1e9e21266155d90fa3ce4edbd4b006f90f0d1d9169d725da833e58a3a40c0e44116ea3db5466e2b757c37f0f10300bdc8b53d6ae19cd265d9c231df324057662e73ddffdb24ad1881757fb7c13d27afa553a82ab5bdbb5b46e43166ea7d1db4fc602de7dc74e98012b5e41b4965e19ddc565682dcc3e1145f0d80ac38e65dd48ce56fb7abf71fd537a96baf1f08ba8c27de9e8cfa47144b41a6f999a0ee2a601cc44ddd9f7f0153a0f2c6e3e204ad4992011ba557f7310ea31c2c77b62438cf1e4c3926da72de823f8ca0e138ec77044deecfa1de735c64ec9190c21dbcbf3f3445bf1214b26ed634a46fa55b041c98d4cff865fd3d3c27f61190f08fa536c9e88bdc5c2e181048373e0f721a6f1f721699a2544f788f1c2219892e5cdb0c852a1f1b3638cddd6c88f82573a48a8d7c86e91d688855ab0078bdd14440dff52058209f997b851ebd21ab419112a1cd41c8273d35a560a279bf042818cb39992b70a94015c37c2792edd3a839085c3cbf1f9b2d2851a4de373fb790967e4455777b072b8f4dbdfc8d8c69a74fa945fe16fbbd280593d1a03bc09560993b7160580bceab91a47e0a91ff6fde54631c79cebd907a08262f36a42db2eaabe429f748a3f4ac3b74a8894b22b0189bf586954d8598873098d8003a54de38edbbb87dc9caa3bfd0c4ce9d7cf52f9db2b9a88b89222d2359564f55f9f0eb57c66e03a1ee9cf5fd640cbe2ef8b964bc75afa025a45c464c49501191e1155210d4c8e63c1f8782f4623a33f3d2a5cee1abe95362f6b945eb9f8d1f842eac4d20d53684df6f846a63b57ffdee1b55ce8f0dcb815c99094ea309a05d264f675b5394dc7fb69f2baa49935af2f19cb693f1d563cba93a1c428266b345c9dfd6d36de289d9308dc609d8e27ebfc043a367a881997f022e2cb8620d2c1013c64fbe38e98000bc2c9ad9acf32a30fa31b1305d31c6631115abb3e9514f5fc9518620c6c8c170d1662edb88568d0fbf595a01de2401d5c7c39f0a77890f55bcd858a36c4182436b2222e5403327b8bd47d3c07d47f6663495a86930ba27e909ef13eec94ea0e418985d700ab2c85792f6ecc7cf49cb1b4d33efb89b456b4dccc204d5dc62a9d87f33e0857d26bc2e93c17dc63349b14fea7a0e5724d2e586a8e06436910f58a882973c68580041ebf5c8c31bf27bd9531da42f7cc060f2ac25d42ce6cf0eb3025b4514e59ad111b0a55d7d66dd7df3fbe1dd38ddfe891bea0f23a63fc25ea06050c3492778bb2490a242d7fc57026d1755c766e372514819b048f184bbf9618eaf5a4ecc41dd923add4571915f5b8b5d427443c80f5263dcbaa945d959186b6f8e91ceebd9bccd76e2b7253e69df150e3ff1015bf3d9fb5b36ef00eaa84c68674d42caca89c536fbe349420fe31597705a66df5afae414d7e47ded4469a8c956be305443fad528328b094ef2332c6b1aa2c638d77820d20f0bb0b9c773b363b253f1289bf41fedf498ef821d71c1f93f25f4dc77b605fecc68e89fa6b3eef23f09b51dce37f9a172f39e1001e94aa7d431a4c46fb1ae5fa7d5f6b41ad2608f7b31ba9a1ce0dd2f11a4df48e96c6eaed8a6b78b512eeae2a391caaf9e3ba654200b79502d4028bd1fbca4e297dbaba203570a1934c6f5daa8bf5e9ff8d18d973c76da31da98e24f263516178092778abe17a8a8f1c5e23ab88a3490d5263bcb41fc7e2e9d6b6a455569614d37bebce404a9aae441428cf29746c99a8310e3b8558bf5fada3e6289cb9eea46b97c41cb7a8569fb2cd7a5e55ac222f77ae97316539ce5308c5e15250f09a5ae3a76300bea7c69f43da54a24e184012a15bb04ad3c70c191b12df520815865c287eb75892b85f2fba014f375aacce192ee6ef415545158ea2caaddceac044cb90cfeaa5536c4b21e4e785fd2ab52077cd9408a3ec07c8f24cf128a05f2aec2be8354ad7bdcbf217335624c2aebd3b9b5254c06471e1c974cf887eb1976750f90e2d7fce64e9a19d0850025bf65f010eb83972454349a9372714508e1c071826a9264aad0a4e0a647023b8b9e650a620cd68f4589d5f32c9e43c2e7a2e016079b7e432a27bd1f254c2d16874454791f910f865f2d34d7e2d25d0c772da4da1ec5e1957e0b0e2cf2d96d2b768c4a14906ef2a2ddc06ac4d4363d0a69e0b29033c456d664d058d7e0ad3fdeb1e1dfb84f7ef752e1af9a7c3b55cdfa72b117a8b93f93f4d012dd3d722d959b2940676069507ac453ecc66e40cd85654bff58e40ef185f406746fbb30a3d500bfb5a329f18112b5b80103672906192390825db4a109bff5aba4d186a5569cefe49911b3588a2236c86fcfcdd7bd67455030b3db65d726f735456d12e90ef30e76a7826f04b644c1da3bfff3b7e8087ea198b2f40022d4de4f0885e95ef3242f94b0c7b735ad4cf2f426126f7ab327ef6aad4344434b79452e2e309d7e8dbd3ea58b34aac595d714975a33366f429c55d39700f96bb77cbb3862844ee1279952d71fecf37a07977f2cba71d86ecd725f7a9cb1503c20f17a2d8be8137dc5fc2f45226ae73108ea9291b6ccc6f67e18aa14075b4105872db446f64945508ca85aed09f7d1334c5077ad35aed3285c5bf814e4ef41b712ccbc9fce7230597d953b4aa6b18beb89db091a5a0144fbbd01ea25cebf58c83c0742c1928d7d6b66ab534882066edec6b4c492e815a3285674921065f17775e075a7bfe3e5c2c987c26acafb0da57e54362b0c8996b5fd05b9d0cd22bbcf1811b4ff2700f0a212065058515cfaba70d9636f0d0f75050e2e05be25875f8a75b901ea6ec0d533d2a015740a5680fcf978877f9c4c3ac7da770598482bf0443ba86dd3fad5f45d06e452b205398711e4ef5e910f7d0d27b1526ca234a7916f6e0c7c324fd19b182f61090dfdefa7236d02a04704038f14a1b198d3c225486272af5c14ba5ec5e21313849fee68807ae2151d8cd18bce3c17bd891f7881e416a714e1ce72ab5291bc9587d2846f098fa0b9c59a7cfa93566696880f1bfd36f54042503fd97321f1f23b9bb3dc05770ed7cf8ef8e26c1eb8c329512e14602acfae62bb94d7601597c0bdf1ade277d65ac7f0b4c994865236804efd1e5a13ef1c96f4583caf7c44d769c2167986705cad503ac76d003a7829a82b29f0daaf01abc420cf0f03ee962a5bab1dfa47373ab814a7efca5a3e8ebce149f565b4be21e6c4207fccb4f95f23d6dd858c4fca8b050a807a480fead9ac350f62f45ab83d8744b9bd9da985666c2ae571f1530c5ec71caaff6068624105db474063ab3123fa6ed657de6534910da26ee03e6ef6c00df859b3e36efd853534af796826ef61fc225ec055ef55caaf53b110603f65855e1e3e841e88f483b15f2ee4f27f45cf35a0a223e326651e111c62b5cd3176e4680e3ad4f1f6a63a28601ad5bfcb37467c860573d5ff3ba16f456b743e280c415e0bfeea58ca86433de42cb60682d1b98d7d94ad449806b6abb4157a37b51b9fda96620d6296b0c130846bbc3c3845c914d9677d990f8da7d380538e7272e10de06278f561e72991be80d03d2e5048beb0a88a5fafbe4ff14834b3b4b060b253a03afa5b7c565bbf5c2980be42befb89a316bf8f9149009ceba29557b4414572ae60a818caad2e9a748a30a3a788b286c4701e955e214d9613b5f0cb4aba2c2e1d62f655e42aaffc7b74b807385a6f4b0bb6663dbec9535a8c1987618e91be0156db70ffdfc2ec8d8c01c0534507c0d4e35a9a70d3e0141ca322583ce2d216692c4850e927f6b579cfc2b54677e279d957175a4f9f40bc885d3bf4bab4185ba22881a3825551bd67c92cce7afcc00c22e872edcd6d042d17ffd37c0f3a759c516a37333f2a4f2b5d2d423c248634ec10e02cf6a1d6d5b8a2c36c102f9831bf4490e468506ff51e466afcd17192d29da0bc432e1dccd1fcb1527c727e1fa6269386a15d53e4260086819721c20ed45fdefa948336faf8ab23292e300a44b30b98e9ddee2c8fcbb12a4506dc86326342f136df2fb72ca94348e61f982afaeec37a9b7c6fe8ef8cbffa776dbb667008ec12e24dd2c31aed89c3d348fa3446f2e564458c20ae3da9930f8f9b8c8bbc36cf454600991e99653948a86173c1b6516697e18e49fad9362129f7fa72cbd8140600d802903f5e6c87b31c3eb2e3a57ea277d1b0db4dae9cd5e1cd0cb55ce1a38a47d48751f971bb2c6ccb8a3d3eaa62455a412706fc466187ee772eb86e7e7034c2020c6b26558f6d4c798ff7f955fd19541f1b01e8987d1fd112de41dfeacf883bda96683e4faba68d8bc6711fa9af13fbbcab3d86d843153aa58f228900e16fb4111b5ea1ebfadcbc3aa70169772a643a655ca1f5ddabb9dbb794da7c428a8c2072415b772c1d7384aaa8854ef913712363bfc4919e463af1d9c65cb68b339d741325cc0f973f8e083f2b127bc7326c8c4dec995f1966acd5fd63f74cf3428c888b050bc1e73e468ea214e330cd01b96da5fe2953cbc7ffadd2d9151b4a68d83b180013a82c26dc44efe8b5cd7604322373ce58845a0e690337c435eb4e14c9ae3e37ee8a0701e7620b447e33fe9fa4d123457721cc6e38a86e8bdd82467b3728b4db97eaec6a7e3b00cf5b9b4094e9611a62f5931d0b092d0f2ec67fdbcfd6706b796aa13945057d1d1798f5e84671b0cd7e28bd900d037faa5a317defa5c20c6e9a78aa8af56b150e119e6cfead42c9eb444a88e1174809fe66cb97ae634b54575c0e78cb965e8d47d7b462bdf1df1d14da91cb6c4a53de818c2a182196c42d7681cd91639b079d7e4c447c6cb1d714257079a025a7b60f9f60fd214027015720d1239457b499c5f43d6e3c0ffeeb665669218b9da8588b858e9b25a41ff2f04cd5a5560d0f00e5cd6af40ffa0de373a777e90334ec2153a2ab4f35c66217246156816361d3c23c4c32088cee23791f3a6ed62c23aa0176fd87c02a7abdd4fae1bc641086f5b6d119e24d93d3ad0318b70ed671111d847625839b33bf46a5b163ba9253ff94ce156bc2127bee8e47a83136b7193e0f36c289d2747a99728e46482f779a78cc69def9d788ebd0250003237596bf0c12e3d233c6800ced236f54d6466a90084e53c189e6601184c7b75a6f5944a6f5db77716b89a7af32363da9b37d18e16712c7dfa5029bc3c7458270d8b418a5d488d5bd2c90c5455dcc65e82f8412559b0253f0a6a0da645bb46176b3c2c6f1300190516adea9a0c68c2f5da7b1e04da9013d03241add9449153356b00167439c3800daac1a218f339781f69963878042b2f4608ec517167832ee65110aa5aada0ea9cf90437efbdf7aac04143620cd5a6a28b38be0c89d2c342b7ae91b102fd876a389ba2efd97fcbbe82b18caa70297fd52645eeb411137e16a198fbc3eec525897f5d991bd5080a82c75d", &(0x7f00000012c0)="e1b25613216f806630a4e53a"}}, &(0x7f0000001340))
socket$nl_generic(0x10, 0x3, 0x10)

17:38:58 executing program 1:
timerfd_create(0x8, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = timerfd_create(0x9, 0x800)
timerfd_gettime(r1, &(0x7f0000000000))

17:38:58 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)
fcntl$getown(r2, 0x9)
ioctl$TUNSETLINK(r1, 0x400454cd, 0x303)
timerfd_gettime(r0, 0x0)

17:38:58 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

17:38:58 executing program 1:
timerfd_create(0x8, 0x0)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:38:58 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x1000, 0x0, 0x80000001})
read$FUSE(0xffffffffffffffff, &(0x7f0000000080)={0x2020}, 0x2020)
fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000002140))
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f00000020c0)={0x399f1316, r0}, &(0x7f0000002180)={0xd65, 0x3, 0x1002e6, 0x40, 0x400ff8, 0x66c6})

17:38:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = timerfd_create(0x9, 0x800)
timerfd_gettime(r1, &(0x7f0000000000))

17:38:58 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 5:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:58 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000000c0)=""/131)
timerfd_gettime(r0, 0x0)

17:38:58 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:58 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0xffffffff, 0x0, 0x0, 0x80000001})

17:38:58 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:38:58 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/cgroup\x00')

17:38:58 executing program 5:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:58 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
sched_rr_get_interval(0x0, &(0x7f0000000000))
syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2)

17:38:58 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000002400)=""/162)

17:38:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:38:58 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x8000})

17:38:58 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, <r0=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000000)={0x78, 0x0, r0, {0x1000, 0x4, 0x0, {0x1, 0xfffffffffffffffe, 0x1, 0x9185, 0x100000001, 0x100, 0x7, 0x6, 0x7, 0x16000, 0x8, 0xee01, r2, 0x401, 0xff99}}}, 0x78)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000004180)={&(0x7f0000004140)=[0xfff, 0x9, 0x3, 0x7, 0xefc, 0x7f, 0xffff], 0x7, 0x800, 0x0, <r3=>0xffffffffffffffff})
write$FUSE_GETXATTR(r3, &(0x7f00000041c0)={0x18, 0xfffffffffffffffe, r1, {0x7}}, 0x18)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r4, 0x0)

17:38:58 executing program 5:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:38:58 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:38:58 executing program 2:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 3:
r0 = getpid()
wait4(r0, &(0x7f00000000c0), 0x1, 0x0)
capset(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x4, 0x200003, 0x80000001, 0x6})
getpid()
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00')

17:38:58 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$apparmor_current(0xffffffffffffffff, &(0x7f0000000000)=@profile={'stack ', '/sys/kernel/debug/binder/transaction_log\x00'}, 0x2f)
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040))
timerfd_gettime(r0, 0x0)

17:38:58 executing program 5:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)

17:38:58 executing program 2:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x9, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:38:58 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = fork()
write$cgroup_pid(r0, &(0x7f0000000000)=r2, 0x12)
timerfd_gettime(r1, 0x0)

17:38:58 executing program 3:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x80000001, 0x1ff})

17:38:58 executing program 5:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

17:38:58 executing program 4:
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00'})
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x101380, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0xb)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r1, 0x0)

17:38:58 executing program 2:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 5:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

17:38:58 executing program 0:
r0 = timerfd_create(0x9, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:38:58 executing program 3:
r0 = fork()
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sched_rr_get_interval(r0, &(0x7f0000000380))
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x0, 0x100, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)
capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f0000000000)={0x8000, 0x1, 0x100, 0x80000001, 0x2100000})
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', r1)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000240)={'wpan0\x00', <r4=>0x0})
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x1, 0x100, 0x4)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r2, 0x400, 0x70bd2c, 0x6, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x7}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x4}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc084}, 0x20000808)
gettid()

17:38:58 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:38:58 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:58 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x80000001, 0x1ff})

17:38:58 executing program 5:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))

17:38:58 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x80000001, 0x1ff})

17:38:58 executing program 0:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:38:58 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x7}}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
r7 = geteuid()
getgroups(0x4000000000000315, &(0x7f00000042c0)=[r2, r2, r2, <r8=>r2, r2, r2, r5])
write$FUSE_LK(r0, &(0x7f0000004280)={0x28, 0xfffffffffffffff5, 0x0, {{0x42b, 0x9, 0x0, r6}}}, 0x28)
write$FUSE_ENTRY(r3, &(0x7f0000004180)={0x90, 0xffffffffffffffda, r4, {0x0, 0x2, 0x7, 0x0, 0x86, 0x9, {0x0, 0x9, 0x3, 0x3, 0x8, 0x10001, 0x5, 0x80000000, 0x80000001, 0x6000, 0x7f, r7, r8, 0xd96}}}, 0x90)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r9, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000004240)={0x7, 0x1})
timerfd_gettime(r0, 0x0)

17:38:58 executing program 5:
wait4(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0))

17:38:58 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x5, 0x80000001, 0x1ff})

17:38:58 executing program 0:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:38:58 executing program 3:
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000002140)={0x2020, 0x0, 0x0, <r1=>0x0}, 0x2020)
read$FUSE(0xffffffffffffffff, &(0x7f0000004180)={0x2020, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(0xffffffffffffffff, &(0x7f00000061c0)={0x510, 0x0, 0x0, [{{0x4, 0x1, 0x3, 0x74, 0x200, 0x415174b6, {0x5, 0x1ff, 0x7, 0x4, 0x3, 0x1, 0x80000000, 0x1ffc, 0x22, 0x6000, 0x5, 0xee01, 0x0, 0x2, 0x401}}, {0x0, 0x3, 0x1, 0x8, '['}}, {{0x3, 0x2, 0xe52, 0x9, 0xdb66, 0x1, {0x5, 0x7, 0x9, 0x8, 0x200, 0x40, 0x1ff, 0x4, 0x4, 0xa000, 0x3, 0xffffffffffffffff, r0, 0x3, 0x3}}, {0x0, 0x0, 0x9, 0x1, '-+-/!+\xc3&)'}}, {{0x2, 0x2, 0x6, 0x0, 0x1, 0x6252, {0x1, 0x40, 0x49db, 0x2, 0x100000001, 0x7, 0x8, 0x5, 0x9, 0xc000, 0x10000, 0x0, 0xffffffffffffffff, 0x81, 0x1}}, {0x4, 0x22, 0x0, 0x9}}, {{0x1, 0x0, 0x2, 0xfffffffffffffff7, 0x8, 0x7b55, {0x4, 0x6, 0x1, 0x40, 0x7, 0x1, 0x7, 0x1, 0x5, 0xc000, 0xba30, 0x0, 0xee00, 0x4, 0x401}}, {0x0, 0x126d34bf, 0x3, 0x4, '@!#'}}, {{0x1, 0x2, 0x4, 0x58, 0x7, 0x7fff, {0x3, 0x3, 0x5, 0x7d3f, 0x1, 0x5, 0x101, 0x3, 0x0, 0x6000, 0xe9, r1, 0xffffffffffffffff, 0x0, 0xb1}}, {0x5, 0x2, 0xc, 0x1ff, '&(-%.-$:\xb7$#('}}, {{0x2, 0x3, 0x0, 0x7f, 0x8, 0x1ff, {0x2, 0x2, 0x1, 0x8000, 0x0, 0x1, 0x2, 0xaf1, 0x8, 0xc000, 0x7, 0xffffffffffffffff, 0xee00, 0x7, 0x3}}, {0x4, 0x80000001, 0x3, 0xfffffffb, '&#]'}}, {{0x1, 0x0, 0x9, 0x2, 0x4, 0x10001, {0x2, 0x8, 0x8, 0x1, 0x2, 0x200, 0x7fff, 0x5, 0x80, 0x1000, 0x722, r2, 0x0, 0x7, 0x1}}, {0x6, 0x7fffffff, 0x2, 0x0, '\\]'}}, {{0x2, 0x2, 0x1ff, 0x1, 0x4d40, 0x0, {0x0, 0x8000, 0x9, 0x100000000, 0x0, 0x51f59f28, 0x9, 0xb6cc, 0x3, 0x6000, 0x400, 0x0, 0xffffffffffffffff, 0xffff0001, 0x7}}, {0x2, 0x200}}]}, 0x510)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)={0x49, "8e990b34175be8c60c0c9d937c4118276e0e1ef7f6ff7dadde3c62c614fb0f0b92b9d5a3137f047db0a962af7d7f3ac2848add2dbf3b13d19c6004a47013b677a029d72b9de9b1178a"})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:38:59 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2, 0x2, 0x7], 0x3, 0x80000, 0x0, <r1=>0xffffffffffffffff})
ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f00000002c0))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$TUNSETLINK(r2, 0x400454cd, 0x307)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f00000000c0))

17:38:59 executing program 5:
wait4(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0))

17:38:59 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:59 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)

17:38:59 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
sendmsg$SMC_PNETID_FLUSH(r1, &(0x7f0000000000)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x38, 0x0, 0x400, 0x3, 0x25dfdbfc, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_vlan\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4010}, 0x4000)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
write$FUSE_BMAP(r2, &(0x7f00000002c0)={0x18, 0x0, 0x0, {0xffffffffffffffff}}, 0x18)
sendmsg$SMC_PNETID_DEL(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'xfrm0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x40001}, 0x10)
timerfd_gettime(r0, 0x0)
ioctl$TUNSETOFFLOAD(r2, 0x400454d0, 0x0)
write$FUSE_OPEN(r2, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x4}}, 0x20)
write$FUSE_ATTR(r1, &(0x7f0000000300)={0x78, 0x24, 0x0, {0x3, 0x9, 0x0, {0x3, 0xc933, 0x3f, 0xffffffffffff40b6, 0x2800000000000000, 0x7, 0x3ff, 0x800101, 0xfffff001, 0x4000, 0x10001, 0xee00, 0xee01, 0x202000, 0x5}}}, 0x78)

17:38:59 executing program 0:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:38:59 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7ffffffe, 0x6})
openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000100)={0x9, 0x9, 0x1, 0x0, 0x9, 0x5})

17:38:59 executing program 5:
wait4(0xffffffffffffffff, 0x0, 0x0, 0x0)

17:38:59 executing program 0:
r0 = timerfd_create(0x9, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

17:38:59 executing program 4:
ioctl$SIOCGIFHWADDR(0xffffffffffffffff, 0x8927, &(0x7f0000000040)={'bond_slave_1\x00'})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNGETSNDBUF(r0, 0x800454d3, &(0x7f0000000000))
ioctl$TUNSETCARRIER(r0, 0x400454e2, &(0x7f00000000c0))
timerfd_gettime(r0, 0x0)

17:38:59 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000100)='nl802154\x00', r0)
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000000c0)={0x5, 0xff, 0x80, 0x5, 0x7, 0x3ff})

17:38:59 executing program 1:
sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)

17:38:59 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:38:59 executing program 0:
timerfd_create(0x9, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:00 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:00 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000000c0)={{0x0, 0x0, 0x80}})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'nr0\x00'})

17:39:00 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2046)
geteuid()
syz_open_procfs$namespace(r1, &(0x7f00000020c0)='ns/pid_for_children\x00')
r2 = fork()
capset(&(0x7f0000002140)={0x20071026, r2}, &(0x7f0000002180)={0x0, 0x3ff, 0x4, 0x1ff, 0x0, 0x1})

17:39:00 executing program 1:
sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)

17:39:00 executing program 0:
timerfd_create(0x9, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:00 executing program 1:
sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)

17:39:00 executing program 1:
socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)

17:39:00 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
write$FUSE_BMAP(r0, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x7}}, 0x18)
ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000080)=""/210)
timerfd_gettime(r0, 0x0)

17:39:00 executing program 0:
timerfd_create(0x9, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:00 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:00 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000080)={'vlan0\x00'})

17:39:00 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:01 executing program 1:
socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)

17:39:01 executing program 0:
r0 = timerfd_create(0x9, 0x0)
timerfd_gettime(r0, 0x0)

17:39:01 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000000))
ioctl$TUNSETVNETBE(r0, 0x400454de, &(0x7f0000000040)=0x1)
mmap$binder(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x73b4)
timerfd_gettime(r0, 0x0)
write$FUSE_STATFS(r0, &(0x7f00000000c0)={0x60, 0x0, 0x0, {{0x2000400000, 0x1, 0xb9, 0x7ff, 0x8, 0x3, 0x9, 0x1}}}, 0x60)

17:39:01 executing program 3:
capset(&(0x7f0000000000)={0x20071026, 0xffffffffffffffff}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe, 0x0, 0x3})
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000080)=0x80000001)

17:39:01 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x7fffffff})

17:39:01 executing program 0:
r0 = timerfd_create(0x9, 0x0)
timerfd_gettime(r0, 0x0)

17:39:01 executing program 1:
socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(0xffffffffffffffff, &(0x7f0000000080)="ba08de222d460ea5b55131b6d8407d133a725c8a8f7327b016ec3e959545f125f55ef315dd9c4aab0c1ab3ea1bb3e3dfaecbfe64818e4284aad4696adafe821ed7fc0c14a183cd128d403f696c69886e2a78de776b44d8389d50ec11aea6d2eebdcde9158b0bb8375de43fd3ee768fb4ccee0fe7377f302108d28c5c7e567ebf0142d26a149640007484a2b2e4db468b7c2d3cd9e2bf1fb50355522881a98ea964e2a833811c3e5f6bf8f6f71a86e2bb92d724", 0xb3, 0x2000c015, 0x0, 0x0)

17:39:01 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$TUNSETLINK(r0, 0x400454cd, 0x18)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan1\x00', <r1=>0x0})
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_LK(r0, &(0x7f0000002240)={0x28, 0x0, r2, {{0x200, 0x5c, 0x2}}}, 0x28)
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x5c, 0x0, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80)

17:39:01 executing program 0:
r0 = timerfd_create(0x9, 0x0)
timerfd_gettime(r0, 0x0)

17:39:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:01 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:01 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000700))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:01 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000300)={{0x0, 0x0, 0x80}})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)={0xfff, 0x1ff, 0x6, 0x5dce, 0x5d, 0xc1})

17:39:01 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x2000c015, 0x0, 0x0)

17:39:01 executing program 0:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2046)
geteuid()
syz_open_procfs$namespace(r1, &(0x7f00000020c0)='ns/pid_for_children\x00')
r2 = fork()
capset(&(0x7f0000002140)={0x20071026, r2}, &(0x7f0000002180)={0x0, 0x3ff, 0x4, 0x1ff, 0x0, 0x1})

17:39:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  294.776896] binder: 6345:6351 ioctl 81f8943c 20000300 returned -22
17:39:01 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
capset(&(0x7f0000000080)={0x19980330, 0xffffffffffffffff}, &(0x7f00000000c0)={0x1d16, 0x81, 0x400, 0x0, 0x3, 0x6})

17:39:01 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:39:01 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
bind$phonet(r0, &(0x7f0000000000)={0x23, 0xca, 0x0, 0x3}, 0x10)
timerfd_gettime(r0, 0x0)

[  294.825498] binder: 6345:6361 ioctl 81f8943c 20000300 returned -22
17:39:01 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  294.966103] binder: 6376:6380 ioctl c0306201 0 returned -14
[  294.976040] binder: 6376:6380 ioctl c0306201 20000100 returned -11
17:39:02 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:02 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000080)={0xfffffffc, 0x0, 0x1, 0x80000001})

17:39:02 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:39:02 executing program 4:
ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000100))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
clock_gettime(0x3, &(0x7f0000000040))
ioctl$VFIO_IOMMU_GET_INFO(r0, 0x3b70, &(0x7f00000000c0)={0x18, 0x0, 0x0, 0xfffffffa})
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fb0\x00', 0x290001, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/net\x00')
ioctl$FBIOGET_CON2FBMAP(r1, 0x460f, &(0x7f0000000140)={0x37, 0x1})
timerfd_gettime(r0, 0x0)

17:39:02 executing program 0:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2046)
geteuid()
syz_open_procfs$namespace(r1, &(0x7f00000020c0)='ns/pid_for_children\x00')
r2 = fork()
capset(&(0x7f0000002140)={0x20071026, r2}, &(0x7f0000002180)={0x0, 0x3ff, 0x4, 0x1ff, 0x0, 0x1})

17:39:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:02 executing program 4:
r0 = getpgid(0x0)
getpgid(r0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r1, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000000c0)={<r2=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000010c0)={r2, 0x0, "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", "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"})

17:39:02 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$TUNSETTXFILTER(0xffffffffffffffff, 0x400454d1, &(0x7f0000000080)={0x0, 0x2, [@broadcast, @empty]})

17:39:02 executing program 1:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

[  295.703676] binder: 6391:6400 ioctl c0306201 0 returned -14
17:39:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:02 executing program 0:
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

17:39:02 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:02 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
fcntl$getown(r0, 0x9)
ioctl$FBIOGETCMAP(r0, 0x4604, &(0x7f0000000340)={0x81, 0x5, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0], &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0, 0x0]})

17:39:02 executing program 1:
r0 = getpgid(0x0)
getpgid(r0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r1, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000000c0)={<r2=>0x0, 0x0, "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", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000010c0)={r2, 0x0, "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", "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"})

17:39:02 executing program 3:
r0 = gettid()
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
timer_create(0x0, &(0x7f00000000c0)={0x0, 0x15, 0x0, @tid=r1}, &(0x7f0000000100))
syz_open_procfs$namespace(r0, &(0x7f0000000080)='ns/net\x00')
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:39:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000700))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  295.839433] binder: 6407:6418 ioctl c0306201 0 returned -14
17:39:02 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:02 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000040)=""/196)
timerfd_gettime(r0, 0x0)

17:39:02 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000002100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000080)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2046)
geteuid()
syz_open_procfs$namespace(r1, &(0x7f00000020c0)='ns/pid_for_children\x00')
r2 = fork()
capset(&(0x7f0000002140)={0x20071026, r2}, &(0x7f0000002180)={0x0, 0x3ff, 0x4, 0x1ff, 0x0, 0x1})

17:39:02 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x108, 0x0, 0x0, 0x80080001})

17:39:02 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:02 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000700))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  295.973111] binder: 6427:6435 ioctl 81f8943c 20000300 returned -22
[  295.981580] binder: 6430:6437 ioctl c0306201 0 returned -14
17:39:02 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:02 executing program 4:
clock_getres(0x3, &(0x7f0000000000))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:03 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$KVM_GET_NESTED_STATE(r1, 0xc080aebe, &(0x7f00000000c0)={{0x0, 0x0, 0x80}})
ioctl$SIOCGIFHWADDR(r0, 0x8927, &(0x7f0000000000)={'nr0\x00'})

17:39:03 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/net/tun\x00', 0x101000, 0x0)
write$tun(r0, &(0x7f0000000100)={@void, @val={0x1, 0x80, 0x0, 0x4, 0x7f, 0x76}, @mpls={[{0x400}, {0x5319, 0x0, 0x1}, {0x15d}, {0x675, 0x0, 0x1}, {0x100}, {0x5, 0x0, 0x1}], @generic="53ba96a78bada675ac570f4f40169f7b716da49f57c3cbeb66a7d8737ee02f5e37336ce2e98f8098bfc6f5305237b21d9ccd20d99ec90c81f10adc0302225ff3303350b83cf5c6d59df52633a34ce45dacab508650077762ab75f0613d5099021142a202c471cfb9a0f5bb762e3cd779add7"}}, 0x94)
r1 = getpgid(0x0)
capset(&(0x7f0000000080)={0x19980330, r1}, 0x0)
capset(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x0, 0x0, 0xfffffffe, 0x100, 0x4})

[  296.104880] binder: 6447:6454 ioctl 81f8943c 20000300 returned -22
[  296.121343] binder: 6449:6456 ioctl c0306201 0 returned -14
17:39:03 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
connect$pppl2tp(r0, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e20, @remote}, 0x3, 0x2, 0x4, 0x2}}, 0x26)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x14, 0x5, 0x1, 0x20, 0xc0, 0xffffffffffffffff, 0x10001, [], 0x0, r1, 0x1, 0x5, 0x2}, 0x40)
write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x5}}, 0x18)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r2, 0x0)

17:39:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r5, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000700))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  296.159007] binder: 6449:6456 ioctl c0306201 0 returned -14
17:39:03 executing program 5:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 1:
clock_getres(0x3, &(0x7f0000000000))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:03 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
capset(&(0x7f0000000100)={0x399f1316}, &(0x7f0000000140)={0x1000, 0x40000000, 0x5, 0x81, 0x0, 0x3721})
r0 = getpgid(0xffffffffffffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0)='nl802154\x00', 0xffffffffffffffff)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', <r4=>0x0})
r5 = getpgid(0x0)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f0000000340)=0x3)
capset(&(0x7f00000002c0)={0x19980330, r5}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x48, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_PID={0x8, 0x1c, r5}]}, 0x48}, 0x1, 0x0, 0x0, 0x4800}, 0x4000100)
capset(&(0x7f0000000080)={0x20080522, r0}, &(0x7f00000000c0)={0x1, 0x9a, 0xffffc390, 0x101, 0xec4a, 0x10000})

17:39:03 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 4:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, <r2=>0x0})
wait4(r0, 0x0, 0x2, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000400)={0x0, r2, "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", "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"})
ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x3)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r5, 0x0)

17:39:03 executing program 1:
clock_getres(0x3, &(0x7f0000000000))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

[  296.294837] binder: 6468:6476 ioctl 81f8943c 20000300 returned -22
17:39:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r5, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:03 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  296.338733] binder: 6473:6482 ioctl c0306201 0 returned -14
[  296.375483] binder: 6473:6482 ioctl c0306201 0 returned -14
17:39:03 executing program 3:
write$FUSE_LSEEK(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, 0x0, {0xce}}, 0x18)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x5, 0xfffffff8, 0xffffffff, 0x101, 0x4, 0x53a})

17:39:03 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f0000000000))

17:39:03 executing program 1:
clock_getres(0x3, &(0x7f0000000000))
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:03 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  296.446137] binder: 6494:6498 ioctl c0306201 0 returned -14
[  296.472797] binder: 6489:6499 ioctl 81f8943c 20000300 returned -22
[  296.482474] binder: 6494:6498 ioctl c0306201 0 returned -14
17:39:03 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = getpid()
capset(&(0x7f0000000080)={0x20071026, r0}, &(0x7f00000000c0)={0x200, 0x7e07, 0x65, 0x8000, 0x4, 0x268})

17:39:03 executing program 1:
clock_getres(0x3, &(0x7f0000000000))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)

17:39:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
clock_gettime(0x0, &(0x7f0000000040))
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = getpgid(0x0)
write$FUSE_LK(r1, &(0x7f0000000000)={0x28, 0xfffffffffffffffe, 0x0, {{0x40, 0x4e12, 0x1, r2}}}, 0x28)

17:39:03 executing program 1:
clock_getres(0x3, &(0x7f0000000000))

[  296.561248] binder: 6508:6511 ioctl c0306201 0 returned -14
[  296.591977] binder: 6508:6511 ioctl c0306201 20000100 returned -11
17:39:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:39:03 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x578, 0x240, 0xe00, 0x960, 0x8000, 0x8, 0x8, 0x1, {0x3, 0x80000000, 0x1}, {0x5, 0x367}, {0x5, 0x6}, {0x9d2, 0x4f, 0x1}, 0x1, 0x10, 0x39d, 0x1, 0x0, 0x1, 0x256, 0xee, 0x8, 0xffffffff, 0x0, 0x5, 0x23, 0x100, 0x2, 0x3})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 1:
clock_getres(0x0, &(0x7f0000000000))

17:39:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:39:03 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
timerfd_gettime(r0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

[  296.685689] binder: 6516:6524 ioctl 81f8943c 20000300 returned -22
[  296.702623] binder: 6529:6531 ioctl c0306201 0 returned -14
17:39:03 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)

17:39:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd={0x66642a85, 0x0, r4}}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:03 executing program 1:
clock_getres(0x0, &(0x7f0000000000))

17:39:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

[  296.761642] binder: 6537:6541 ioctl c0306201 0 returned -14
17:39:03 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r0=>0x0)
capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0xff, 0x8000, 0x81, 0x0, 0x7ea})
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
capset(&(0x7f0000000140)={0x19980330, r1}, &(0x7f0000000180)={0x78bd, 0x1, 0x35a8, 0x7f, 0xfffff0ed, 0x2})

17:39:03 executing program 1:
clock_getres(0x0, &(0x7f0000000000))

17:39:03 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:03 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  296.871081] binder: 6551:6557 ioctl c0306201 0 returned -14
[  296.872793] binder: 6548:6555 ioctl 81f8943c 20000300 returned -22
17:39:03 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
timer_create(0x7, &(0x7f0000000080)={0x0, 0x20002c, 0x2, @thr={&(0x7f0000000140)="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", &(0x7f0000001140)="4503dd83064186dc98f52c1eaa6c37e6a6e5778255b1c7337d9533a4b8436764d43f257b3986c77ca7a6b513d901f2fc911c429709a320027c483fa59957976bdcc78ca84bb0b50a068edd5a6c6fb929bc5071287e03239fd41b4d41e2d322db090f32d74240a171ad62e5d9c1b8ed98eb34f856a3672acc099287ee131ef40d01da182f329af1f6bd67decb1c50d3e2783a0e0251531499de6463b545e93cab649e9317601829d5916a341db2c1a67c65a86e80"}}, &(0x7f0000000100))

17:39:03 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  296.939936] binder: 6563:6565 ioctl c0306201 0 returned -14
[  296.946299] binder: 6564:6566 ioctl c0306201 0 returned -14
[  297.021625] binder: 6570:6573 ioctl 81f8943c 20000300 returned -22
17:39:04 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x616182, 0x0)
ioctl$TUNSETOFFLOAD(r1, 0x400454d0, 0x3)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)

17:39:04 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:04 executing program 1:
clock_getres(0x3, 0x0)

17:39:04 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0)

17:39:04 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:04 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
write$fb(0xffffffffffffffff, &(0x7f0000000080)="f4959508c3a9353632429ad04dbafb2e63c1d835df443e2636d7762ed572f0a2cb55a1e49f6a116e348c8cbacbbc2bfe0990b091b8b681d7f6f35903cef31df367a9650d18cb8e2eed1051b18853b315dce41e08100575124c5faa7db67f39d7dd5d768abc4a86262506749514dd95069ca5ab4984a583fa76700861ab660cdf53af1578115dbd1600884ec8922de240aa15e3e1920b72feba93d531784e8946832a24949ad6d8f1a7be20", 0xab)

17:39:04 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:04 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
timerfd_gettime(r0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

[  297.662305] binder: 6581:6588 ioctl c0306201 0 returned -14
17:39:04 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:04 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:04 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:04 executing program 4:
r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000000)={0xe000000000000000, 0x2000, 0x4, 0xd, 0x81})
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
timerfd_gettime(r1, 0x0)

17:39:04 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x8000, 0x7, 0x9, 0x2, 0x28000000], 0x5, 0xb9831fff820be7f, 0x0, <r0=>0xffffffffffffffff})
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000200)=0x1d)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$vbi(&(0x7f0000000180)='/dev/vbi#\x00', 0x1, 0x2)
syz_open_dev$dri(&(0x7f0000000240)='/dev/dri/card#\x00', 0x2, 0x1ab200)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x2, 0x3, 0x4, 0x4, 0xfffffffe, {0x0, 0xea60}, {0x5, 0x0, 0x4, 0x4, 0x3, 0x4, "bd59452f"}, 0x5, 0x1, @fd, 0xda6, 0x0, r1})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000001c0))

17:39:04 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  297.824897] binder: 6609:6612 ioctl c0306201 0 returned -14
[  297.835801] binder: 6606:6613 ioctl c0306201 0 returned -14
17:39:04 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:04 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80"})

17:39:04 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNSETSNDBUF(0xffffffffffffffff, 0x400454d4, &(0x7f0000000040))
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
r3 = geteuid()
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, <r4=>0x0}, 0x2020)
read$FUSE(r0, &(0x7f0000004140)={0x2020, 0x0, 0x0, 0x0, <r5=>0x0}, 0x2020)
getgroups(0x2, &(0x7f0000006180)=[<r6=>0xee00, 0x0])
read$FUSE(r0, &(0x7f00000061c0)={0x2020, 0x0, 0x0, <r7=>0x0}, 0x2020)
r8 = geteuid()
read$FUSE(0xffffffffffffffff, &(0x7f0000008200)={0x2020, 0x0, 0x0, 0x0, <r9=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r1, &(0x7f000000a240)={0x768, 0x0, r2, [{{0x4, 0x1, 0x0, 0x4, 0x8001, 0xe7a4, {0x0, 0xfff, 0x5, 0x4, 0x6, 0x80, 0x7, 0x7, 0x6, 0x6000, 0x8, r3, 0xee01, 0xfffffff9, 0x1}}, {0x3, 0xfff, 0x29, 0x1, '/sys/kernel/debug/binder/transaction_log\x00'}}, {{0x3, 0x0, 0x8001, 0x80000000, 0x4, 0x3166, {0x5, 0x1, 0x3ff, 0x615, 0x0, 0x4, 0x800, 0x1, 0x7, 0x1000, 0xffffffff, 0xee00, 0xee01, 0x8, 0x7f}}, {0x6, 0x8c, 0x29, 0x0, '/sys/kernel/debug/binder/transaction_log\x00'}}, {{0x6, 0x1, 0xcb5, 0x46, 0x1, 0x7, {0x5, 0x4, 0x8, 0x4, 0xfffffffffffffffc, 0x1, 0x6, 0x400, 0x6, 0x4000, 0x3, 0xffffffffffffffff, 0xee01, 0x3f, 0x5}}, {0x5, 0xffe, 0x29, 0xff, '/sys/kernel/debug/binder/transaction_log\x00'}}, {{0x2, 0x0, 0x41, 0x6, 0x0, 0x8, {0x2, 0x0, 0x6, 0x600000000, 0x5, 0x9, 0x8000, 0x9, 0x1ff, 0x2000, 0x66, 0x0, r4, 0x7, 0x5}}, {0x4, 0x9, 0x5, 0x100, '\x8d),\xed\xe0'}}, {{0x4, 0xf442, 0x2, 0x80000001, 0x0, 0x2d, {0x6, 0x8, 0x8, 0x6, 0x33, 0x9, 0xff, 0x400, 0x0, 0xc000, 0x7, 0xffffffffffffffff, r5, 0x2, 0x7}}, {0x0, 0x3, 0x2, 0x9, '\']'}}, {{0x4, 0x1, 0x2, 0x1ff, 0x6, 0x0, {0x6, 0x49c, 0x0, 0x6, 0x20, 0x4, 0x8000, 0x80000, 0x9, 0x1000, 0x1, 0xee01, r6, 0x44e0, 0x9}}, {0x2, 0x4, 0x29, 0x101, '/sys/kernel/debug/binder/transaction_log\x00'}}, {{0x6, 0x1, 0x0, 0x1, 0x2, 0x3, {0x1, 0x2, 0xfff, 0x0, 0x8, 0x3ff, 0x7, 0x9, 0x81, 0x2000, 0x1, r7, 0x0, 0x80, 0x5}}, {0x3, 0x10001, 0x29, 0x18, '/sys/kernel/debug/binder/transaction_log\x00'}}, {{0x4, 0x2, 0x9, 0x7fff, 0x2, 0x3f, {0x5, 0x0, 0x5, 0x9, 0xffffffff, 0x5, 0xaf39, 0x0, 0x8, 0x1000, 0x4, 0xee01, 0x0, 0x7, 0x10001}}, {0x0, 0x9, 0x29, 0x0, '/sys/kernel/debug/binder/transaction_log\x00'}}, {{0x6, 0x2, 0x1, 0x8, 0x100, 0xec9, {0x0, 0x8000, 0x95, 0x6, 0x2c633f0f, 0x20, 0x0, 0x0, 0x5, 0x4000, 0x2, r8, r9, 0x25}}, {0x0, 0xff, 0x1, 0x4, '-'}}, {{0x3, 0x2, 0x8, 0x8, 0x6, 0x6, {0x4, 0x81, 0x1, 0x4, 0x9, 0x9, 0xc2, 0xfffffffb, 0x8, 0x6000, 0x5, 0xffffffffffffffff, 0x0, 0x5, 0x5}}, {0x5, 0x51, 0x29, 0x0, '/sys/kernel/debug/binder/transaction_log\x00'}}]}, 0x768)
getgroups(0x3, &(0x7f0000000000)=[<r10=>0xffffffffffffffff, 0xee00, 0xee00])
ioctl$TUNSETGROUP(r0, 0x400454ce, r10)
timerfd_gettime(0xffffffffffffffff, 0x0)

17:39:04 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))
clock_getres(0x0, &(0x7f00000001c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x80000001, 0x30, 0x38c8})
syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2)

17:39:04 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  297.974682] binder: 6622:6629 ioctl c0306201 0 returned -14
[  297.992010] binder: 6625:6632 ioctl c0306201 0 returned -14
[  297.999495] binder: 6625:6632 ioctl c0306201 20000100 returned -11
17:39:05 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
timerfd_gettime(r0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:05 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000000c0))
clock_gettime(0x0, &(0x7f0000000000))

17:39:05 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:05 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:05 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:05 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:05 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:05 executing program 4:
r0 = semget$private(0x0, 0x2, 0x1)
semctl$SETVAL(r0, 0x0, 0x10, &(0x7f00000000c0)=0x5)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
timerfd_gettime(r1, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000000)={0x40})

[  298.640322] binder: 6645:6654 ioctl c0306201 0 returned -14
[  298.647584] binder: 6643:6652 ioctl c0306201 0 returned -14
17:39:05 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='irq_handler_exit\x00', r0}, 0x10)

17:39:05 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  298.733441] binder: 6659:6666 ioctl c0306201 0 returned -14
[  298.772522] binder: 6664:6671 ioctl c0306201 0 returned -14
17:39:05 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000080)=0x7fffffff)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/uts\x00')

17:39:05 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  298.785492] binder: 6664:6671 ioctl c0306201 0 returned -14
[  298.846535] binder: 6678:6681 ioctl c0306201 0 returned -14
17:39:06 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
timerfd_gettime(r0, 0x0)
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:06 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x12)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
write$FUSE_WRITE(r1, &(0x7f00000010c0)={0x18, 0x0, 0x0, {0xffffffc0}}, 0x18)
timerfd_gettime(r0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f00000000c0)={0x0, 0x0, "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", "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"})
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000001140))
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000040)=""/2)
write$FUSE_BMAP(r1, &(0x7f0000001100)={0x18, 0x0, 0x0, {0x2}}, 0x18)

17:39:06 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:06 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:06 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
capset(&(0x7f0000000080), &(0x7f00000000c0)={0x7fffffff, 0x3, 0x8, 0x3, 0xff, 0x8})

17:39:06 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492e"})

17:39:06 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
capset(&(0x7f0000000080)={0x19980330, r0}, &(0x7f00000000c0)={0x3, 0x5, 0x9, 0x7, 0x1, 0x1})

17:39:06 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:06 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="8c"})

[  299.489650] binder: 6686:6692 ioctl 81f8943c 20000300 returned -22
[  299.496510] binder: 6690:6693 ioctl c0306201 0 returned -14
[  299.515496] binder: 6689:6696 ioctl c0306201 0 returned -14
[  299.525266] binder: 6690:6693 ioctl c0306201 20000100 returned -11
17:39:06 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{}]})
timerfd_gettime(r0, 0x0)
ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000080)={0x5, 0x0, [{0x32c, 0x0, 0x5}, {0x880, 0x0, 0x5}, {0x385, 0x0, 0xffffffffffff7fff}, {0x34f, 0x0, 0xee4b}, {0xc0010044, 0x0, 0x20}]})
fcntl$getown(r0, 0x9)

17:39:06 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001, 0x0, 0x3ff})

17:39:06 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000000)="51a44810258338582dda6270a53f05fc7d3d30db16af3562fca9e9ab6fb53ce85b42004484ff513f4fa9fe051e64060bb7845ce1f050049eb80968a2e500680000000000000000", 0x47)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)={0x4, 0x0, [{0xb8c, 0x0, 0x7}, {0x13b, 0x0, 0xffffffff}, {0xa62, 0x0, 0x1ff}, {0xba0, 0x0, 0xffffffffffffff01}]})
r2 = socket$phonet(0x23, 0x2, 0x1)
ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000000c0))

[  299.565014] binder: 6689:6696 ioctl c0306201 0 returned -14
[  299.581506] binder: 6706:6707 ioctl c0306201 0 returned -14
[  299.582168] binder: 6702:6705 ioctl 81f8943c 20000300 returned -22
[  299.595108] binder: 6706:6707 ioctl c0306201 20000100 returned -11
17:39:07 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
timerfd_gettime(r0, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:07 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:07 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:07 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x4000, 0xffffffff, 0x0, 0x80000001})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x12203, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan4\x00'})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40000001)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40048000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008854}, 0x0)

17:39:07 executing program 4:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020, 0x0, 0x0, 0x0, <r0=>0x0}, 0x2020)
r1 = geteuid()
read$FUSE(0xffffffffffffffff, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000000)={{0x3, 0x0, r0, r1, r2, 0xd9, 0xf000}, 0x1, 0x6, 0x0, 0x0, 0x0, 0x0, 0x7fff})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r3, 0x0)

17:39:07 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000140)={'virt_wifi0\x00', @random})
sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'rose0\x00'}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004}, 0x80)

17:39:07 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:07 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
timerfd_gettime(r0, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:07 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  300.399624] binder: 6723:6729 ioctl c0306201 0 returned -14
[  300.406681] binder: 6725:6728 ioctl 81f8943c 20000300 returned -22
[  300.414428] binder: 6724:6733 ioctl c0306201 0 returned -14
[  300.429409] binder: 6724:6733 ioctl c0306201 0 returned -14
17:39:07 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
timerfd_gettime(r0, 0x0)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:07 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$vivid(&(0x7f0000000100)='/dev/video#\x00', 0x0, 0x2)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
write$FUSE_STATFS(r0, &(0x7f0000000080)={0x60, 0x0, 0x0, {{0x42, 0x6, 0x101, 0x8, 0x3f, 0xdb75, 0x80, 0x9d6}}}, 0x60)
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:39:07 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:07 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)
timerfd_gettime(r0, 0x0)

17:39:07 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  300.489090] binder: 6742:6747 ioctl c0306201 0 returned -14
[  300.520001] binder: 6749:6753 ioctl 81f8943c 20000300 returned -22
17:39:07 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:07 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:07 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x802)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:07 executing program 3:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:39:07 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x0)
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  300.581331] binder: 6759:6763 ioctl c0306201 0 returned -14
[  300.605478] binder: 6757:6766 ioctl c0306201 0 returned -14
[  300.614035] binder: 6765:6769 ioctl 81f8943c 20000300 returned -22
17:39:07 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)

17:39:07 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:07 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)
timerfd_gettime(r0, 0x0)

[  300.660988] binder: 6776:6778 ioctl 81f8943c 20000300 returned -22
[  300.668163] binder: 6771:6775 ioctl c0306201 0 returned -14
17:39:07 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x0, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x28}}, 0x20004804)
capset(&(0x7f0000000000)={0x19980330, 0xffffffffffffffff}, &(0x7f0000000040)={0x40, 0x0, 0x0, 0x0, 0xbe})

[  300.765538] binder: 6788:6794 ioctl 81f8943c 20000300 returned -22
17:39:08 executing program 3:
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x0, 0xfffffffc, 0xfffffffc, 0x80000001, 0x7})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'netdevsim0\x00', @multicast})

17:39:08 executing program 4:
r0 = socket$caif_stream(0x25, 0x1, 0x0)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000080))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})

17:39:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:39:08 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)
timerfd_gettime(r0, 0x0)

17:39:08 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:08 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:08 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:08 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)
timerfd_gettime(r0, 0x0)

17:39:08 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)

17:39:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:39:08 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x1ff, 0x0, 0x80000001})

[  301.501437] binder: 6803:6814 ioctl c0306201 0 returned -14
[  301.511752] binder: 6808:6815 ioctl 81f8943c 20000300 returned -22
17:39:08 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:08 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)

17:39:08 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)

17:39:08 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:39:08 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  301.572868] binder: 6821:6825 ioctl c0306201 0 returned -14
[  301.608223] binder: 6826:6830 ioctl 81f8943c 20000300 returned -22
[  301.671869] binder: 6838:6841 ioctl 81f8943c 20000300 returned -22
[  301.678683] binder: 6835:6839 ioctl c0306201 0 returned -14
17:39:09 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:09 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:09 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:09 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:09 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)

17:39:09 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:09 executing program 2:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:09 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:09 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)
write$FUSE_ENTRY(r0, &(0x7f0000002100)={0x90, 0x0, r1, {0x5, 0x2, 0xa58b, 0x60f, 0x20, 0x1f, {0x5, 0x4, 0x0, 0x1000, 0x7, 0x3ff, 0x2, 0xd8, 0x3, 0xc000, 0xbe4, r2, r3, 0x0, 0x80}}}, 0x90)

17:39:09 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  302.384374] binder: 6850:6857 ioctl c0306201 0 returned -14
17:39:09 executing program 0:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:09 executing program 2:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

[  302.486321] binder: 6867:6873 ioctl c0306201 0 returned -14
17:39:10 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:10 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)

17:39:10 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
r2 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r2, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:10 executing program 2:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:10 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:10 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:10 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:10 executing program 3:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:10 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:10 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x21, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80"})

[  303.278647] binder: 6888:6896 ioctl c0306201 0 returned -14
17:39:10 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

[  303.394953] binder: 6904:6909 ioctl c0306201 0 returned -14
17:39:10 executing program 1:
r0 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:10 executing program 3:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000300))
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:11 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 3:
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:11 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:11 executing program 1:
r0 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
ioctl$KVM_SET_SIGNAL_MASK(r1, 0x4004ae8b, &(0x7f00000000c0)={0xc3, "0dbb11b37e34797e1a171c3f4435932c2b0758f779a98f56ecb735080d04218ce3ddc31faa6d6372ec002c7e3cc89cbfbb7768d14172568692472fb55cefe62b449e84e5db77ccb70845b250383f295c59af27ad035d1fca9d74f62a8e7f03d89a0e1b2c5697cc50dd6ffb3ba5ac5cc659ec6cd455ec4e973ff7162e6c19bd1b85f875f568bf14f3f60fa46c7cef47dbd8573befcd40f63dd7227bbe89d15dba656a63927c51da5abd60fe06c05d3c4d3f10e9541ce1b7f989ca01545d9b3b2653a4cf"})
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 1:
r0 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:11 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020}, 0x2020)

[  304.262618] binder: 6933:6940 ioctl 81f8943c 0 returned -22
[  304.286711] binder: 6936:6943 ioctl c0306201 0 returned -14
17:39:11 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:11 executing program 4:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2)
r1 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:11 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

[  304.380968] binder: 6951:6957 ioctl 81f8943c 0 returned -22
17:39:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:11 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

17:39:11 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  304.440765] binder: 6956:6966 ioctl c0306201 0 returned -14
17:39:11 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

[  304.493080] binder: 6969:6973 ioctl 81f8943c 0 returned -22
17:39:11 executing program 1:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:11 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:11 executing program 2:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

[  304.540963] binder: 6976:6980 ioctl c0306201 0 returned -14
[  304.609109] binder: 6985:6990 ioctl 81f8943c 0 returned -22
17:39:12 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:12 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x11, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492e"})

17:39:12 executing program 3:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000000c0)={0x2020}, 0x2020)

17:39:12 executing program 1:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)

17:39:12 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:12 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:12 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, 0x0, 0x0)

17:39:12 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:12 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  305.272572] binder: 6998:7004 ioctl c0306201 0 returned -14
[  305.290161] binder: 7001:7009 ioctl 81f8943c 0 returned -22
[  305.291658] binder: 6999:7008 ioctl 81f8943c 0 returned -22
[  305.302897] binder: 7001:7009 ioctl c0306201 0 returned -14
17:39:12 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INTERRUPT(r0, &(0x7f0000000000)={0x10, 0xffffffffffffffda, r1}, 0x10)

17:39:12 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  305.352009] binder: 7012:7014 ioctl 81f8943c 0 returned -22
[  305.361927] binder: 7012:7014 ioctl c0306201 0 returned -14
[  305.370295] binder: 7013:7017 ioctl c0306201 0 returned -14
17:39:12 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  305.441621] binder: 7022:7027 ioctl 81f8943c 0 returned -22
[  305.455234] binder: 7022:7027 ioctl c0306201 0 returned -14
[  305.467581] binder: 7023:7028 ioctl c0306201 0 returned -14
17:39:13 executing program 4:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:13 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:13 executing program 3:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x4000, 0xffffffff, 0x0, 0x80000001})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vfio/vfio\x00', 0x12203, 0x0)
socket$caif_seqpacket(0x25, 0x5, 0x5)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r1=>0x0})
syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', r0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000001c0)={'wpan4\x00'})
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r3, 0x20, 0x70bd27, 0x25dfdbfc}, 0x14}}, 0x40000001)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40048000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008854}, 0x0)

17:39:13 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000000240)="8c"})

17:39:13 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:13 executing program 1:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
semctl$SETVAL(0x0, 0x4, 0x10, &(0x7f0000000080)=0x7fffffff)
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/uts\x00')

17:39:13 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))
clock_getres(0x0, &(0x7f00000001c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x80000001, 0x30, 0x38c8})
syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2)

17:39:13 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  306.195871] binder: 7036:7047 ioctl 81f8943c 0 returned -22
[  306.198393] binder: 7042:7049 ioctl c0306201 0 returned -14
[  306.211852] binder: 7040:7048 ioctl c0306201 0 returned -14
17:39:13 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

17:39:13 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:13 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x0)
timerfd_gettime(r0, 0x0)
openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_INTERRUPT(r2, &(0x7f00000006c0)={0x10}, 0x10)
socket$phonet(0x23, 0x2, 0x1)
r3 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0xf4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done, @request_death={0x400c630e, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:13 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  306.302086] binder: 7060:7063 ioctl c0306201 0 returned -14
17:39:13 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:13 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x578, 0x240, 0xe00, 0x960, 0x8000, 0x8, 0x8, 0x1, {0x3, 0x80000000, 0x1}, {0x5, 0x367}, {0x5, 0x6}, {0x9d2, 0x4f, 0x1}, 0x1, 0x10, 0x39d, 0x1, 0x0, 0x1, 0x256, 0xee, 0x8, 0xffffffff, 0x0, 0x5, 0x23, 0x100, 0x2, 0x3})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:13 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:13 executing program 4:
r0 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:13 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:13 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))
clock_getres(0x0, &(0x7f00000001c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x80000001, 0x30, 0x38c8})
syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2)

17:39:14 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x578, 0x240, 0xe00, 0x960, 0x8000, 0x8, 0x8, 0x1, {0x3, 0x80000000, 0x1}, {0x5, 0x367}, {0x5, 0x6}, {0x9d2, 0x4f, 0x1}, 0x1, 0x10, 0x39d, 0x1, 0x0, 0x1, 0x256, 0xee, 0x8, 0xffffffff, 0x0, 0x5, 0x23, 0x100, 0x2, 0x3})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:14 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:14 executing program 4:
r0 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

[  307.096282] binder: 7084:7089 ioctl 81f8943c 0 returned -22
[  307.109918] binder: 7081:7091 ioctl c0306201 0 returned -14
17:39:14 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:14 executing program 4:
r0 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:14 executing program 2:
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  307.220340] binder: 7099:7106 ioctl c0306201 0 returned -14
17:39:14 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:14 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x578, 0x240, 0xe00, 0x960, 0x8000, 0x8, 0x8, 0x1, {0x3, 0x80000000, 0x1}, {0x5, 0x367}, {0x5, 0x6}, {0x9d2, 0x4f, 0x1}, 0x1, 0x10, 0x39d, 0x1, 0x0, 0x1, 0x256, 0xee, 0x8, 0xffffffff, 0x0, 0x5, 0x23, 0x100, 0x2, 0x3})
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000001})
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:14 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:14 executing program 2:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:14 executing program 4:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:14 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))
clock_getres(0x0, &(0x7f00000001c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x80000001, 0x30, 0x38c8})
syz_open_dev$radio(&(0x7f0000000180)='/dev/radio#\x00', 0x0, 0x2)

17:39:14 executing program 2:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:14 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f00000000c0)={0x578, 0x240, 0xe00, 0x960, 0x8000, 0x8, 0x8, 0x1, {0x3, 0x80000000, 0x1}, {0x5, 0x367}, {0x5, 0x6}, {0x9d2, 0x4f, 0x1}, 0x1, 0x10, 0x39d, 0x1, 0x0, 0x1, 0x256, 0xee, 0x8, 0xffffffff, 0x0, 0x5, 0x23, 0x100, 0x2, 0x3})
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:14 executing program 4:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:14 executing program 5:
r0 = syz_open_dev$vivid(0x0, 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

[  307.969846] binder: 7120:7125 ioctl c0306201 0 returned -14
[  307.991405] binder: 7122:7127 ioctl 81f8943c 0 returned -22
17:39:14 executing program 2:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:14 executing program 4:
syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(0xffffffffffffffff, 0x80885659, &(0x7f00000001c0)={0x0, @src_change})

17:39:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xe4, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}, @dead_binder_done], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:15 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:15 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:15 executing program 5:
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
r1 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000180)={0x0, ""/256, <r2=>0x0})
wait4(r0, 0x0, 0x2, &(0x7f00000000c0))
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
r4 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000003c0)={&(0x7f0000000380)='./file0\x00', 0x0, 0x18}, 0x10)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f0000000400)={0x0, r2, "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", "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"})
ioctl$VFIO_CHECK_EXTENSION(r3, 0x3b65, 0x3)
r5 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r5, 0x0)

17:39:15 executing program 4:
r0 = syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, 0x0)

17:39:15 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))
clock_getres(0x0, &(0x7f00000001c0))
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x80000000, 0x0, 0x0, 0x80000001, 0x30, 0x38c8})

17:39:15 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0xd8, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}, @transaction_sg={0x40486311, {0x2, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000200)={@fda={0x66646185, 0x8, 0x1, 0x20}, @fda={0x66646185, 0x9, 0x0, 0x34}, @fd}, &(0x7f0000000280)={0x0, 0x20, 0x40}}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:15 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0), 0x6c, 0x0, &(0x7f0000000140)="f1794a43e776f1ac488ca84d2e4a771349bc400818015d2c57ba0493398b7af73102562f5eb66c55c7cd95ec720686a379acd9a1e503704903c4b5373c30c728ac9d77fd0a736096e1e46a7d28d5d382f2fc54933f865e82bd1e46f2ee0fba273d0ee03faab8e024c0a73701"})
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0), 0x42, 0x0, &(0x7f0000000240)="8c3ad57969cea459e755d2216c5c7d492ee6b9c9f3e768427242c33fe648c0ca80fac3018a6d2b9c33e94cd9b8b34129bc48d3f448254851aa4154a75cd7fb524b7e"})

[  308.877872] binder: 7161:7163 ioctl 81f8943c 0 returned -22
17:39:15 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:15 executing program 1:
socketpair(0x10, 0x3, 0x67, &(0x7f0000000080))

17:39:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x8c, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper, @acquire_done={0x40106309, 0x9e}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  308.963503] binder: 7169:7173 ioctl 81f8943c 0 returned -22
17:39:15 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x7}}, 0x18)
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r4=>0x0, 0x0, <r5=>0x0, <r6=>0x0}, 0x2020)
r7 = geteuid()
getgroups(0x4000000000000315, &(0x7f00000042c0)=[r2, r2, r2, <r8=>r2, r2, r2, r5])
write$FUSE_LK(r0, &(0x7f0000004280)={0x28, 0xfffffffffffffff5, 0x0, {{0x42b, 0x9, 0x0, r6}}}, 0x28)
write$FUSE_ENTRY(r3, &(0x7f0000004180)={0x90, 0xffffffffffffffda, r4, {0x0, 0x2, 0x7, 0x0, 0x86, 0x9, {0x0, 0x9, 0x3, 0x3, 0x8, 0x10001, 0x5, 0x80000000, 0x80000001, 0x6000, 0x7f, r7, r8, 0xd96}}}, 0x90)
r9 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r9, 0x0, 0x0)
ioctl$KVM_GET_ONE_REG(r9, 0x4010aeab, &(0x7f0000004240)={0x7, 0x1})
timerfd_gettime(r0, 0x0)

17:39:15 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:15 executing program 1:
socketpair(0x0, 0x3, 0x67, &(0x7f0000000080))

17:39:15 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x78, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}, @exit_looper], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  309.060493] binder: 7184:7188 ioctl 81f8943c 0 returned -22
[  309.124820] binder: 7195:7196 ioctl 81f8943c 0 returned -22
17:39:16 executing program 1:
socketpair(0x0, 0x3, 0x67, &(0x7f0000000080))

17:39:16 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))
clock_getres(0x0, &(0x7f00000001c0))

17:39:16 executing program 5:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:16 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:16 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x74, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper, @increfs={0x40046304, 0x2}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:16 executing program 4:
wait4(0xffffffffffffffff, &(0x7f0000000000), 0x8, &(0x7f00000000c0))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)

17:39:16 executing program 1:
socketpair(0x0, 0x3, 0x67, &(0x7f0000000080))

17:39:16 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x9, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:16 executing program 1:
socketpair(0x10, 0x0, 0x67, &(0x7f0000000080))

17:39:16 executing program 5:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:16 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x6c, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}, @enter_looper], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:16 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  309.824891] binder: 7214:7223 ioctl c0306201 0 returned -14
[  309.832455] binder: 7213:7224 ioctl 81f8943c 0 returned -22
17:39:16 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x9, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

[  309.912004] binder: 7231:7236 ioctl c0306201 0 returned -14
[  309.931823] binder: 7230:7237 ioctl 81f8943c 0 returned -22
17:39:17 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:17 executing program 5:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:17 executing program 1:
socketpair(0x10, 0x0, 0x67, &(0x7f0000000080))

17:39:17 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

17:39:17 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x68, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:17 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = timerfd_create(0x9, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:17 executing program 5:
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:17 executing program 1:
socketpair(0x10, 0x0, 0x67, &(0x7f0000000080))

17:39:17 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

[  310.700154] binder: 7252:7258 ioctl 81f8943c 0 returned -22
[  310.708851] binder: 7255:7261 ioctl c0306201 0 returned -14
17:39:17 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:17 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x1c, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:17 executing program 1:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

[  310.824757] binder: 7271:7276 ioctl 81f8943c 0 returned -22
[  310.844256] binder: 7268:7277 ioctl c0306201 0 returned -14
[  310.860450] binder: 7268:7277 ioctl c0306201 0 returned -14
17:39:18 executing program 3:
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:18 executing program 5:
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:18 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:18 executing program 1:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

17:39:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:18 executing program 3:
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:18 executing program 1:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

17:39:18 executing program 5:
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:18 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:18 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x1c, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  311.594823] binder: 7290:7295 ioctl c0306201 0 returned -14
[  311.626031] binder: 7290:7295 ioctl c0306201 0 returned -14
17:39:18 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:18 executing program 3:
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:18 executing program 1:
socketpair(0x10, 0x3, 0x67, 0x0)

17:39:18 executing program 4:
r0 = timerfd_create(0x9, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:18 executing program 5:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

[  311.710897] binder: 7303:7308 ioctl c0306201 0 returned -14
[  311.720859] binder: 7305:7311 ioctl 81f8943c 0 returned -22
[  311.741664] binder: 7303:7308 ioctl c0306201 0 returned -14
17:39:18 executing program 2:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

17:39:18 executing program 3:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:18 executing program 1:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:18 executing program 4:
r0 = timerfd_create(0x0, 0x800)
timerfd_gettime(r0, &(0x7f0000000000))

17:39:18 executing program 5:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:18 executing program 4:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, &(0x7f0000000000))

[  311.871590] binder: 7324:7330 ioctl c0306201 0 returned -14
17:39:19 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x1c, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:19 executing program 1:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

17:39:19 executing program 2:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

17:39:19 executing program 5:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:19 executing program 4:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:19 executing program 4:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:19 executing program 1:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

[  312.640995] binder: 7353:7361 ioctl 81f8943c 0 returned -22
17:39:19 executing program 3:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:19 executing program 4:
timerfd_create(0x0, 0x0)
timerfd_gettime(0xffffffffffffffff, &(0x7f0000000000))

17:39:19 executing program 2:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

17:39:19 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:19 executing program 1:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

17:39:20 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x68, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:20 executing program 4:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:20 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:20 executing program 2:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000080))

17:39:20 executing program 1:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000080))

17:39:20 executing program 4:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:20 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000080))

[  313.532896] binder: 7391:7398 ioctl 81f8943c 0 returned -22
17:39:20 executing program 3:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:20 executing program 5:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:20 executing program 1:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000080))

17:39:20 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x68, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f00000001c0)}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:20 executing program 4:
r0 = timerfd_create(0x0, 0x0)
timerfd_gettime(r0, 0x0)

17:39:20 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000080))

17:39:20 executing program 5:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:20 executing program 1:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000080))

[  313.667779] binder: 7410:7420 ioctl 81f8943c 0 returned -22
17:39:20 executing program 4:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:20 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x68, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:20 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000080))

17:39:20 executing program 1:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000080))

[  313.810100] binder: 7432:7440 ioctl 81f8943c 0 returned -22
17:39:21 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, &(0x7f0000000200))

17:39:21 executing program 1:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000080))

17:39:21 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000080))

17:39:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000500)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:21 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000080))

17:39:21 executing program 5:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:21 executing program 1:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000080))

[  314.520605] binder: 7450:7454 ioctl 81f8943c 0 returned -22
17:39:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000500)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:21 executing program 4:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:21 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000080))

17:39:21 executing program 1:
socketpair(0x10, 0x3, 0x0, 0x0)

17:39:21 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x54, 0x0, &(0x7f0000000500)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

[  314.607381] binder: 7464:7467 ioctl 81f8943c 0 returned -22
[  314.710897] binder: 7475:7482 ioctl 81f8943c 0 returned -22
17:39:22 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x0, &(0x7f0000000200))

17:39:22 executing program 2:
socketpair(0x10, 0x3, 0x0, 0x0)

17:39:22 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x68, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done={0x40106309, 0x1}, @reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000140)={@ptr={0x70742a85, 0x1, &(0x7f00000000c0)=""/97, 0x61, 0x0, 0x34}, @fda={0x66646185, 0x0, 0x1, 0x2b}, @fda={0x66646185, 0x4, 0x1, 0xd}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x68, 0x0, &(0x7f0000000500)=[@increfs, @acquire_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:22 executing program 2:
socketpair(0x10, 0x0, 0x67, &(0x7f0000000080))

17:39:22 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002500)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r1, 0x200, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8880}, 0x20040000)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x40, 0x0, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xae58c270f47c379}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000004)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000003c0)={0x2020}, 0x2020)
capset(&(0x7f00000002c0)={0x20080522, r2}, &(0x7f0000000000)={0x80000, 0x0, 0x0, 0x8})
r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x1, 0x0)
ioctl$EVIOCGABS3F(r3, 0x8018457f, &(0x7f0000002400)=""/162)

17:39:22 executing program 2:
socketpair(0x10, 0x0, 0x67, &(0x7f0000000080))

17:39:22 executing program 1:
r0 = syz_open_dev$binderN(&(0x7f0000000080)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)})

[  315.421562] binder: 7490:7495 ioctl 81f8943c 0 returned -22
[  315.427951] binder: 7489:7496 ioctl 81f8943c 0 returned -22
17:39:22 executing program 4:
fork()
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:22 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000500)=[@acquire_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:22 executing program 2:
socketpair(0x10, 0x0, 0x67, &(0x7f0000000080))

17:39:22 executing program 5:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = timerfd_create(0x0, 0x800)
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="00000000c7ce4de24e2979f40424101da6ff6e731897b1ed2acc42e9824b63ed2a9a475b499e1b10c1cb0b2d0c33afa0e98026e62ccf2b99e18e651a8e2be61bc80460f1fc18bc911225e560040277b3a7c7c4386583f3513c1adbd0d6f124967b6ea2ba8d12971d0d176e1a5a6c006d4e8164885cdf7283822ba4b6e26b3da2ff357c0371e905bf11225aff85278c029257366a359305390c80", @ANYRES16=0x0, @ANYBLOB="00082cbd7000fbdbdf251400000008001c00", @ANYRES32=r3, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x8800)
timerfd_gettime(r2, 0x0)

[  315.544152] binder: 7503:7511 ioctl c0306201 0 returned -14
[  315.611125] binder: 7510:7518 ioctl 81f8943c 0 returned -22
17:39:23 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x0, &(0x7f0000000200))

17:39:23 executing program 1:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
timerfd_gettime(r0, 0x0)
read$FUSE(r0, &(0x7f00000000c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_STATFS(r0, &(0x7f0000000000)={0x60, 0x0, r1, {{0x1f, 0xaaa, 0x7fff, 0x1d2c1005, 0xcf, 0x5, 0x8, 0x8001}}}, 0x60)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_OPEN(r2, &(0x7f0000002100)={0x20, 0x0, r1, {0x0, 0x6}}, 0x20)

17:39:23 executing program 2:
socketpair(0x0, 0x0, 0x67, &(0x7f0000000080))

17:39:23 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r2, &(0x7f0000002500)={0x18, 0x0, r3, {0x9f}}, 0x18)
r4 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:23 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000500)=[@acquire_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0})

17:39:23 executing program 1:
r0 = fork()
wait4(r0, 0x0, 0x0, &(0x7f0000000200))

17:39:23 executing program 2:
socketpair(0x0, 0x0, 0x67, &(0x7f0000000080))

17:39:23 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r2, &(0x7f0000002500)={0x18, 0x0, r3, {0x9f}}, 0x18)
r4 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

[  316.300506] binder: 7531:7536 ioctl 81f8943c 0 returned -22
17:39:23 executing program 4:
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:23 executing program 0:
r0 = syz_open_dev$binderN(&(0x7f00000002c0)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000680)={0x60, 0x0, &(0x7f0000000500)=[@acquire_done, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x7d, 0x0, &(0x7f0000000600)="588ed134a64bc950c1bd22075ef0cb318f17d42a374f1b705953b3b88c71558b0fc047694f1423a8fe939b55b701ca85549f5d0849b7399925dbb9cfc341939be63c79f7810f1694498561a59af8ee5eca809ca2c84124d38e5a01a37070ffa4ad7f2b3b85bd6a35d7bc40e096a54ee69795f54815533ba87e47a7a4c0"})

17:39:23 executing program 2:
socketpair(0x0, 0x0, 0x67, &(0x7f0000000080))

17:39:23 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r2, &(0x7f0000002500)={0x18, 0x0, r3, {0x9f}}, 0x18)
r4 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

[  316.473966] binder: 7556:7560 ioctl 81f8943c 0 returned -22
17:39:24 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x0, &(0x7f0000000200))

17:39:24 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r2, &(0x7f0000002500)={0x18, 0x0, r3, {0x9f}}, 0x18)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:24 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:39:24 executing program 4:
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:24 executing program 2:
socketpair(0x10, 0x0, 0x0, &(0x7f0000000080))

17:39:24 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf251700000020002580050002000000000014000400719bb00b4cad26db0822248d4abb622d20012580240003002ea23c223e1e19a03f018c599aeb91808cbeb25ee2324c798231b81f1f7c201f05000200550000002400030099a852326f9f62e47b64c630fd7435abf63b5985e7cb00e665e9b7f82f97d8bf2000018008000100020000000c0005000700000000000000080004000400000064000180050002000000000005000200010000000c00050001000000000000000500020003000000050002000000000020000380060003000000000006000300a3aa00000c0004000202aaaaaaaaaaaa08000100030000000c0005000000000000000000050002001f000000050002000200000014000400c474fc08b9d6ba17053c86aec3bcbb9d24000300329550c7b99b5ddfa98b6b76322ebc5b80760a266cb8017c3ebd450392e364ed08000300", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x400, 0x70bd30, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc002}, 0x20008040)

17:39:24 executing program 2:
socketpair(0x10, 0x0, 0x0, 0x0)

17:39:24 executing program 0:
r0 = fork()
wait4(r0, 0x0, 0x0, &(0x7f0000000200))

17:39:24 executing program 4:
wait4(0x0, &(0x7f0000000080), 0x20000000, &(0x7f0000000200))

17:39:24 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r2, &(0x7f0000002500)={0x18, 0x0, r3, {0x9f}}, 0x18)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:24 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r2, &(0x7f0000002500)={0x18, 0x0, r3, {0x9f}}, 0x18)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:24 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, r1)

17:39:24 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:24 executing program 4:
fork()
wait4(0x0, 0x0, 0x20000000, &(0x7f0000000200))

17:39:24 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf251700000020002580050002000000000014000400719bb00b4cad26db0822248d4abb622d20012580240003002ea23c223e1e19a03f018c599aeb91808cbeb25ee2324c798231b81f1f7c201f05000200550000002400030099a852326f9f62e47b64c630fd7435abf63b5985e7cb00e665e9b7f82f97d8bf2000018008000100020000000c0005000700000000000000080004000400000064000180050002000000000005000200010000000c00050001000000000000000500020003000000050002000000000020000380060003000000000006000300a3aa00000c0004000202aaaaaaaaaaaa08000100030000000c0005000000000000000000050002001f000000050002000200000014000400c474fc08b9d6ba17053c86aec3bcbb9d24000300329550c7b99b5ddfa98b6b76322ebc5b80760a266cb8017c3ebd450392e364ed08000300", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x400, 0x70bd30, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc002}, 0x20008040)

17:39:24 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
read$FUSE(r1, &(0x7f00000004c0)={0x2020}, 0x2020)
r2 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:24 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/201)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x7fffffff, 0x7, 0x3f1c000, 0x9, 0x956d, 0x4, 0x1000000, 0x9, 0x1], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000540)=0x100000000)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000))

17:39:24 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x3c, r1, 0x400, 0x70bd30, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc002}, 0x20008040)

17:39:24 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/201)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x7fffffff, 0x7, 0x3f1c000, 0x9, 0x956d, 0x4, 0x1000000, 0x9, 0x1], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000540)=0x100000000)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000))

17:39:25 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x0, 0x0)
sendto$phonet(r0, &(0x7f00000000c0)="ef8ac9c4a251ed0bc66c76e94047d466048c6f68edaefc20e32efe2b655129516b94ee254fb23c1812eb1b8dc516f5b08fbc91114527366affd85a06e902e86ec4de7f3524f8eed0e5210a217bfb484df3fc3e2063a6bd8c747c383e47e43a2054d188c5deaa30c84b01257776622809d77b470820f5ac43f1a87aa48c0e7b673388bdba66f143cb744571e39da5e977755c7352dd3b88d6b011058c7604241384edc99d3263bc96f2bb8e3eea6e2592", 0xb0, 0x8008084, &(0x7f0000000040)={0x23, 0x80, 0x1, 0x3d}, 0x10)
r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000200)='/dev/fb0\x00', 0x1a9d00, 0x0)
ioctl$FBIO_WAITFORVSYNC(r1, 0x40044620, 0x0)

17:39:25 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r2 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:25 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/201)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x7fffffff, 0x7, 0x3f1c000, 0x9, 0x956d, 0x4, 0x1000000, 0x9, 0x1], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000540)=0x100000000)
ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000000))

17:39:25 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)

17:39:25 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
timer_create(0x7, &(0x7f0000000200)={0x0, 0x12, 0x4, @thr={&(0x7f0000000040)="4b08de8b343b2265160728c02a63f0fd1fc824f3103b8988bed05a40ed75faede7678d36976565f89b90975df5e7a0c0c85a1d3a0254ef01eecf01011d01ee2868caa4bc681abcd99fea2c2a3393396d66ffbef5c3098f631953260da295b24c9bc5b211242ed669e4e99b5c2270d0a40ac7e77e94413efbdd8f8ab0038fbf370711d8793d22a0b6441aebcac259680b90239175f28d", &(0x7f0000000100)="c084f4a257879c9b23caa20c9fd48d54e4743e812a366991cf69c80895a1876857736fb83035afcfa41da394ca3fd930f61899472a65f9cbe4b0b6993eb2b963d585f103213856b10d482fdf9f374511b368e3d7dc53a83c8f02d6e5a36a"}}, &(0x7f0000000240))
r2 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:25 executing program 4:
fork()
wait4(0x0, 0x0, 0x0, &(0x7f0000000200))

17:39:25 executing program 0:
r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vim2m\x00', 0x2, 0x0)
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000100)={0x0, 0x2, 0x4, 0x0, 0x6, {}, {0x3, 0x2, 0x91, 0xf5, 0x6, 0x81, "1cc309ec"}, 0x7, 0x3, @fd, 0x34})

17:39:25 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/201)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x7fffffff, 0x7, 0x3f1c000, 0x9, 0x956d, 0x4, 0x1000000, 0x9, 0x1], 0x9, 0x800, 0x0, <r4=>0xffffffffffffffff})
ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000540)=0x100000000)

17:39:25 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:25 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000001c0)={0x73622a85, 0x0, 0x1})
r2 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:25 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:25 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/201)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000500)={&(0x7f00000004c0)=[0x7fffffff, 0x7, 0x3f1c000, 0x9, 0x956d, 0x4, 0x1000000, 0x9, 0x1], 0x9, 0x800})

17:39:25 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

17:39:25 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:25 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:25 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f00000000c0)=""/201)

17:39:25 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:26 executing program 4:
fork()
wait4(0x0, 0x0, 0x0, &(0x7f0000000200))

17:39:26 executing program 1:
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:26 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
getpgid(0x0)
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:26 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r2}, 0x10)
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000240))
ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000040)={'batadv_slave_1\x00', @broadcast})

17:39:26 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

17:39:26 executing program 3 (fault-call:1 fault-nth:0):
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:26 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff)

17:39:26 executing program 1:
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:26 executing program 5:
capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000280)={0x0, 0x0, 0xffffffff, 0x80000001})
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:26 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r1}, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240))

17:39:26 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:26 executing program 1:
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="02002cbd7000fcdbdf251700000020002580050002000000000014000400719bb00b4cad26db0822248d4abb622d20012580240003002ea23c223e1e19a03f018c599aeb91808cbeb25ee2324c798231b81f1f7c201f05000200550000002400030099a852326f9f62e47b64c630fd7435abf63b5985e7cb00e665e9b7f82f97d8bf2000018008000100020000000c0005000700000000000000080004000400000064000180050002000000000005000200010000000c00050001000000000000000500020003000000050002000000000020000380060003000000000006000300a3aa00000c0004000202aaaaaaaaaaaa08000100030000000c0005000000000000000000050002001f000000050002000200000014000400c474fc08b9d6ba17053c86aec3bcbb9d24000300329550c7b99b5ddfa98b6b76322ebc5b80760a266cb8017c3ebd450392e364ed08000300", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  320.705210] FAULT_INJECTION: forcing a failure.
[  320.705210] name fail_futex, interval 1, probability 0, space 0, times 1
[  320.721135] CPU: 0 PID: 7697 Comm: syz-executor.3 Not tainted 4.14.228-syzkaller #0
[  320.728944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  320.738276] Call Trace:
[  320.740847]  dump_stack+0x1b2/0x281
[  320.744452]  should_fail.cold+0x10a/0x149
[  320.748579]  get_futex_key+0x82a/0x1160
[  320.752530]  ? static_obj+0x50/0x50
[  320.756133]  ? futex_lock_pi_atomic+0x2e0/0x2e0
[  320.760845]  futex_wake+0xc6/0x3c0
[  320.764363]  ? get_futex_key+0x1160/0x1160
[  320.768577]  ? ima_match_policy+0x833/0x10e0
[  320.772980]  do_futex+0x281/0x1570
[  320.776516]  ? __lock_acquire+0x5fc/0x3f20
[  320.780728]  ? futex_exit_release+0x220/0x220
[  320.785198]  ? lock_acquire+0x170/0x3f0
[  320.789153]  ? futex_exit_release+0x26/0x220
[  320.793559]  ? trace_hardirqs_on+0x10/0x10
[  320.797791]  ? futex_exit_release+0x26/0x220
[  320.802185]  ? __mutex_lock+0x360/0x1310
[  320.806228]  ? __delayacct_add_tsk+0x4b1/0x5b0
[  320.810795]  ? __might_fault+0x104/0x1b0
[  320.814838]  ? exit_mm_release+0x16/0x30
[  320.818882]  ? lock_downgrade+0x740/0x740
[  320.823013]  SyS_futex+0x1da/0x290
[  320.826539]  ? lock_acquire+0x170/0x3f0
[  320.830492]  ? do_futex+0x1570/0x1570
[  320.834286]  mm_release+0x250/0x2d0
[  320.837892]  do_exit+0x56f/0x2850
[  320.841323]  ? _raw_spin_unlock_irq+0x51/0x80
[  320.845799]  ? finish_task_switch+0x178/0x610
[  320.850273]  ? mm_update_next_owner+0x5b0/0x5b0
[  320.854916]  ? get_signal+0x323/0x1ca0
[  320.858868]  ? lock_downgrade+0x740/0x740
[  320.863002]  do_group_exit+0x100/0x2e0
[  320.866873]  get_signal+0x38d/0x1ca0
[  320.870570]  do_signal+0x7c/0x1550
[  320.874086]  ? SyS_waitid+0x270/0x270
[  320.877862]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[  320.882790]  ? setup_sigcontext+0x820/0x820
[  320.887107]  ? lock_downgrade+0x740/0x740
[  320.891230]  ? vfs_write+0x35d/0x4d0
[  320.894919]  ? SyS_wait4+0x93/0x110
[  320.898539]  ? kernel_wait4+0x1e0/0x1e0
[  320.902493]  ? wait_for_completion_io+0x10/0x10
[  320.907140]  ? vfs_write+0x319/0x4d0
[  320.910844]  ? fput+0xb/0x140
[  320.913926]  ? exit_to_usermode_loop+0x41/0x200
[  320.918573]  exit_to_usermode_loop+0x160/0x200
[  320.923134]  do_syscall_64+0x4a3/0x640
[  320.927003]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  320.932189] RIP: 0033:0x466459
[  320.935364] RSP: 002b:00007f828e4ec188 EFLAGS: 00000246 ORIG_RAX: 000000000000003d
[  320.943203] RAX: fffffffffffffe00 RBX: 000000000056bf60 RCX: 0000000000466459
17:39:27 executing program 4:
fork()
wait4(0x0, 0x0, 0x0, &(0x7f0000000200))

17:39:27 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

17:39:27 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r1}, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:27 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:27 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:27 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x8, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x39, 0x800)
r2 = fcntl$getown(r1, 0x9)
wait4(r2, 0x0, 0x4, 0x0)

[  320.950543] RDX: 0000000020000000 RSI: 0000000000000000 RDI: 00000000000010c0
[  320.957856] RBP: 00007f828e4ec1d0 R08: 0000000000000000 R09: 0000000000000000
[  320.965112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  320.972361] R13: 00007ffdcf06a2bf R14: 00007f828e4ec300 R15: 0000000000022000
17:39:27 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:27 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:27 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:28 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

17:39:28 executing program 5:
r0 = syz_open_dev$binderN(0x0, 0x0, 0x2)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:28 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:28 executing program 4:
fork()
wait4(0x0, 0x0, 0x20000000, 0x0)

17:39:28 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:28 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
fcntl$getown(r0, 0x9)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

17:39:28 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:28 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:28 executing program 3:
r0 = fork()
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r2, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x40080)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r2, 0x132, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x81)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0102}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000080)
r4 = socket$caif_stream(0x25, 0x1, 0x4)
ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000240))
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:28 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x10001, 0x42000)
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:28 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:28 executing program 5:
syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:28 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x4004)

17:39:28 executing program 0:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:28 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:29 executing program 2:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:29 executing program 5:
syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:29 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x4004)

17:39:29 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:29 executing program 4:
fork()
wait4(0x0, 0x0, 0x20000000, 0x0)

[  323.739027] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  323.746107] batman_adv: batadv0: Removing interface: batadv_slave_0
[  323.753977] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  323.760937] batman_adv: batadv0: Removing interface: batadv_slave_1
[  323.769700] device bridge_slave_1 left promiscuous mode
[  323.775481] bridge0: port 2(bridge_slave_1) entered disabled state
[  323.786107] device bridge_slave_0 left promiscuous mode
[  323.791631] bridge0: port 1(bridge_slave_0) entered disabled state
[  323.805143] device veth1_macvtap left promiscuous mode
[  323.811192] device veth0_macvtap left promiscuous mode
[  323.816973] device veth1_vlan left promiscuous mode
[  323.822303] device veth0_vlan left promiscuous mode
[  323.894649] device hsr_slave_1 left promiscuous mode
[  323.903461] device hsr_slave_0 left promiscuous mode
[  323.920300] team0 (unregistering): Port device team_slave_1 removed
[  323.929438] team0 (unregistering): Port device team_slave_0 removed
[  323.940311] bond0 (unregistering): Releasing backup interface bond_slave_1
[  323.951121] bond0 (unregistering): Releasing backup interface bond_slave_0
[  323.977018] bond0 (unregistering): Released all slaves
[  325.572052] IPVS: ftp: loaded support on port[0] = 21
[  325.672547] chnl_net:caif_netlink_parms(): no params data found
[  325.725480] bridge0: port 1(bridge_slave_0) entered blocking state
[  325.731866] bridge0: port 1(bridge_slave_0) entered disabled state
[  325.739428] device bridge_slave_0 entered promiscuous mode
[  325.746547] bridge0: port 2(bridge_slave_1) entered blocking state
[  325.752913] bridge0: port 2(bridge_slave_1) entered disabled state
[  325.760381] device bridge_slave_1 entered promiscuous mode
[  325.778749] bond0: Enslaving bond_slave_0 as an active interface with an up link
[  325.787506] bond0: Enslaving bond_slave_1 as an active interface with an up link
[  325.806329] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready
[  325.813399] team0: Port device team_slave_0 added
[  325.819047] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready
[  325.826285] team0: Port device team_slave_1 added
[  325.844181] batman_adv: batadv0: Adding interface: batadv_slave_0
[  325.850493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.875785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  325.888258] batman_adv: batadv0: Adding interface: batadv_slave_1
[  325.894696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  325.919986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  325.930616] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready
[  325.938267] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready
[  325.960618] device hsr_slave_0 entered promiscuous mode
[  325.966386] device hsr_slave_1 entered promiscuous mode
[  325.972242] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready
[  325.979543] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready
[  326.051675] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.058511] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.065266] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.071637] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.098988] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready
[  326.105070] 8021q: adding VLAN 0 to HW filter on device bond0
[  326.113765] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready
[  326.122668] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[  326.130878] bridge0: port 1(bridge_slave_0) entered disabled state
[  326.137959] bridge0: port 2(bridge_slave_1) entered disabled state
[  326.147623] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready
[  326.153905] 8021q: adding VLAN 0 to HW filter on device team0
[  326.164049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[  326.171822] bridge0: port 1(bridge_slave_0) entered blocking state
[  326.178278] bridge0: port 1(bridge_slave_0) entered forwarding state
[  326.191045] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[  326.198655] bridge0: port 2(bridge_slave_1) entered blocking state
[  326.204980] bridge0: port 2(bridge_slave_1) entered forwarding state
[  326.222936] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  326.232888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  326.244267] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready
[  326.251439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[  326.259297] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[  326.267546] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[  326.274941] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[  326.282740] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[  326.289811] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[  326.301982] IPv6: ADDRCONF(NETDEV_UP): vxcan0: link is not ready
[  326.309985] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  326.316836] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[  326.330166] 8021q: adding VLAN 0 to HW filter on device batadv0
[  326.381449] IPv6: ADDRCONF(NETDEV_UP): veth0_virt_wifi: link is not ready
[  326.392335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[  326.424185] IPv6: ADDRCONF(NETDEV_UP): veth0_vlan: link is not ready
[  326.432186] IPv6: ADDRCONF(NETDEV_UP): vlan0: link is not ready
[  326.438977] IPv6: ADDRCONF(NETDEV_UP): vlan1: link is not ready
[  326.449444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[  326.456830] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[  326.463592] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[  326.472514] device veth0_vlan entered promiscuous mode
[  326.482842] device veth1_vlan entered promiscuous mode
[  326.488956] IPv6: ADDRCONF(NETDEV_UP): macvlan0: link is not ready
[  326.497853] IPv6: ADDRCONF(NETDEV_UP): macvlan1: link is not ready
[  326.510266] IPv6: ADDRCONF(NETDEV_UP): veth0_macvtap: link is not ready
[  326.519644] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[  326.527150] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[  326.534269] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[  326.543765] device veth0_macvtap entered promiscuous mode
[  326.550257] IPv6: ADDRCONF(NETDEV_UP): macvtap0: link is not ready
[  326.558594] device veth1_macvtap entered promiscuous mode
[  326.568296] IPv6: ADDRCONF(NETDEV_UP): veth0_to_batadv: link is not ready
[  326.577187] IPv6: ADDRCONF(NETDEV_UP): veth1_to_batadv: link is not ready
[  326.585680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  326.596013] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.605112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  326.614968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.624273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  326.634216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.643876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  326.653614] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.662762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0
[  326.672591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.682840] batman_adv: batadv0: Interface activated: batadv_slave_0
[  326.690842] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[  326.698262] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[  326.707192] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[  326.717264] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  326.727640] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.736953] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  326.747083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.756329] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  326.766088] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.775306] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  326.785120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.794280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1
[  326.804072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  326.814536] IPv6: ADDRCONF(NETDEV_UP): batadv_slave_1: link is not ready
[  326.821514] batman_adv: batadv0: Interface activated: batadv_slave_1
[  326.828946] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[  326.837291] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[  327.625899] Bluetooth: hci3 command 0x0409 tx timeout
17:39:34 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
wait4(r1, &(0x7f0000000000), 0x20000000, 0x0)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
getpgid(r2)

17:39:34 executing program 0:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:34 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x4004)

17:39:34 executing program 5:
syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:34 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:34 executing program 4:
openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:34 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:34 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)

17:39:34 executing program 0:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:34 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:34 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:34 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)

[  327.940972] binder: 8146:8152 ioctl c0306201 0 returned -14
17:39:35 executing program 3:
r0 = fork()
r1 = fcntl$getown(0xffffffffffffffff, 0x9)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000080)=<r2=>0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/time_for_children\x00')
sched_rr_get_interval(r0, &(0x7f0000000000))
wait4(r1, 0x0, 0x20000000, 0x0)

17:39:35 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:35 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:35 executing program 0:
r0 = syz_open_dev$ndb(0x0, 0x0, 0x4000)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:35 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

17:39:35 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)

17:39:35 executing program 0:
r0 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(r0, 0xab00, 0xffffffffffffffff)

17:39:35 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:35 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:35 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  328.800781] binder: 8171:8179 ioctl c0306201 0 returned -14
17:39:35 executing program 0:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

17:39:35 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, 0x0)

[  328.940133] binder: 8192:8197 ioctl c0306201 0 returned -14
17:39:36 executing program 3:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040))
getrusage(0x0, &(0x7f0000000100))
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:36 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, 0x0, 0x4004)

17:39:36 executing program 0:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

17:39:36 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:36 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)

17:39:36 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:36 executing program 2:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x8, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x39, 0x800)
r2 = fcntl$getown(r1, 0x9)
wait4(r2, 0x0, 0x4, 0x0)

17:39:36 executing program 0:
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x0)
ioctl$NBD_SET_SOCK(0xffffffffffffffff, 0xab00, 0xffffffffffffffff)

17:39:36 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:36 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)

17:39:36 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  329.705162] Bluetooth: hci3 command 0x041b tx timeout
17:39:36 executing program 0:
fork()
wait4(0x0, 0x0, 0x0, &(0x7f0000000200))

17:39:37 executing program 3:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c004}, 0x4004)
r1 = fork()
wait4(r1, 0x0, 0x20000000, 0x0)

17:39:37 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, 0x0, 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:37 executing program 4:
syz_open_procfs$namespace(0x0, 0x0)

17:39:37 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:37 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340), 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:37 executing program 2:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x8, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x39, 0x800)
r2 = fcntl$getown(r1, 0x9)
wait4(r2, 0x0, 0x4, 0x0)

17:39:37 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:37 executing program 4:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040))
getrusage(0x0, &(0x7f0000000100))
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:37 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_INTERRUPT(r0, &(0x7f00000001c0)={0x10, 0xffffffffffffffda}, 0x10)
timerfd_gettime(r0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x20000, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rpcgss_seqno\x00', r1}, 0x10)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000240))

17:39:37 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:37 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340), 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:37 executing program 0 (fault-call:0 fault-nth:0):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

[  330.719453] FAULT_INJECTION: forcing a failure.
[  330.719453] name failslab, interval 1, probability 0, space 0, times 0
[  330.731176] CPU: 0 PID: 8282 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  330.738975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  330.748335] Call Trace:
[  330.750934]  dump_stack+0x1b2/0x281
[  330.754574]  should_fail.cold+0x10a/0x149
[  330.758729]  should_failslab+0xd6/0x130
[  330.762712]  kmem_cache_alloc+0x28e/0x3c0
[  330.766867]  getname_flags+0xc8/0x550
[  330.770674]  do_sys_open+0x1ce/0x410
[  330.774389]  ? filp_open+0x60/0x60
[  330.777937]  ? __do_page_fault+0x159/0xad0
[  330.782177]  ? do_syscall_64+0x4c/0x640
[  330.786156]  ? SyS_open+0x30/0x30
[  330.789611]  do_syscall_64+0x1d5/0x640
[  330.793510]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  330.798700] RIP: 0033:0x419544
[  330.801889] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  330.809597] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  330.816863] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  330.824123] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  330.831385] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  330.838638] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
17:39:38 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x300, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_batadv\x00'})
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
sched_rr_get_interval(r2, &(0x7f00000000c0))

17:39:38 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:38 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340), 0xb8, 0x0, &(0x7f0000000380)="00666a5d7138487f1cad92ce72af8d268a5038bd49cf54fe0256720ec1b726fd830d31374bba1959631023831c773a44e5a68cfe9e3a591f7fe4de9d437135759d4936437b707897bad36cf4b9dfbc11dd6f3f58685b0099ba492c2f002c45a916bc1be7f97878b9f0c19ae554f16230dbffbba5e1659183241b410b7bb3e887e5760fd64d16ac83993c6b6a3258e1a828480838cf338f74bd6daa51957b6de43da2d0d983467eb52758406bb4266519289c60c7c612e4f8"})

17:39:38 executing program 0 (fault-call:0 fault-nth:1):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:38 executing program 5:
r0 = syz_open_dev$binderN(&(0x7f0000000300)='/dev/binder#\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x10, 0x0, &(0x7f0000000340)=[@request_death], 0x0, 0x0, 0x0})

[  331.392377] FAULT_INJECTION: forcing a failure.
[  331.392377] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  331.404210] CPU: 0 PID: 8297 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  331.412036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  331.421480] Call Trace:
[  331.424077]  dump_stack+0x1b2/0x281
[  331.427715]  should_fail.cold+0x10a/0x149
[  331.431872]  __alloc_pages_nodemask+0x22c/0x2720
[  331.436638]  ? __lock_acquire+0x5fc/0x3f20
[  331.440877]  ? get_pid_task+0x91/0x130
[  331.444770]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  331.449652]  ? lock_downgrade+0x740/0x740
[  331.453894]  ? get_pid_task+0xb8/0x130
[  331.457782]  ? proc_fail_nth_write+0x7b/0x180
[  331.462279]  ? proc_tgid_io_accounting+0x7a0/0x7a0
[  331.467213]  cache_grow_begin+0x91/0x630
[  331.471312]  ? check_preemption_disabled+0x35/0x240
[  331.476341]  cache_alloc_refill+0x273/0x350
[  331.480705]  kmem_cache_alloc+0x333/0x3c0
[  331.486430]  getname_flags+0xc8/0x550
[  331.490409]  do_sys_open+0x1ce/0x410
[  331.494128]  ? filp_open+0x60/0x60
[  331.497676]  ? __do_page_fault+0x159/0xad0
[  331.502002]  ? do_syscall_64+0x4c/0x640
[  331.505974]  ? SyS_open+0x30/0x30
[  331.509426]  do_syscall_64+0x1d5/0x640
[  331.513318]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  331.518540] RIP: 0033:0x419544
[  331.521723] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  331.529431] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
17:39:38 executing program 2:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x8, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x39, 0x800)
r2 = fcntl$getown(r1, 0x9)
wait4(r2, 0x0, 0x4, 0x0)

17:39:38 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=0x0], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:38 executing program 4:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040))
getrusage(0x0, &(0x7f0000000100))
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:38 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c004}, 0x4004)
r1 = fork()
wait4(r1, 0x0, 0x20000000, 0x0)

[  331.536699] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  331.544075] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  331.551347] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  331.558618] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
17:39:38 executing program 0 (fault-call:0 fault-nth:2):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:38 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00'], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:38 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  331.642535] FAULT_INJECTION: forcing a failure.
[  331.642535] name failslab, interval 1, probability 0, space 0, times 0
[  331.675217] CPU: 1 PID: 8325 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  331.683050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  331.692495] Call Trace:
[  331.695094]  dump_stack+0x1b2/0x281
[  331.698732]  should_fail.cold+0x10a/0x149
[  331.702999]  should_failslab+0xd6/0x130
[  331.706987]  kmem_cache_alloc+0x28e/0x3c0
[  331.711147]  get_empty_filp+0x86/0x3e0
[  331.715039]  path_openat+0x84/0x2970
[  331.718765]  ? get_pid_task+0x91/0x130
[  331.722659]  ? path_lookupat+0x780/0x780
[  331.726725]  ? trace_hardirqs_on+0x10/0x10
[  331.731063]  do_filp_open+0x179/0x3c0
[  331.734907]  ? may_open_dev+0xe0/0xe0
[  331.738717]  ? __alloc_fd+0x1be/0x490
[  331.742529]  ? lock_downgrade+0x740/0x740
[  331.746679]  ? do_raw_spin_unlock+0x164/0x220
[  331.751182]  ? _raw_spin_unlock+0x29/0x40
[  331.756289]  ? __alloc_fd+0x1be/0x490
[  331.760107]  do_sys_open+0x296/0x410
[  331.763827]  ? filp_open+0x60/0x60
[  331.767377]  ? __do_page_fault+0x159/0xad0
[  331.771604]  ? do_syscall_64+0x4c/0x640
[  331.775566]  ? SyS_open+0x30/0x30
[  331.779133]  do_syscall_64+0x1d5/0x640
[  331.783032]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  331.788251] RIP: 0033:0x419544
[  331.791421] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  331.799114] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  331.806365] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  331.813628] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  331.820979] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  331.828231] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
[  331.852023] Bluetooth: hci3 command 0x040f tx timeout
17:39:39 executing program 3:
socketpair(0x8, 0x0, 0x0, 0x0)
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:39 executing program 0 (fault-call:0 fault-nth:3):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  332.289517] FAULT_INJECTION: forcing a failure.
[  332.289517] name failslab, interval 1, probability 0, space 0, times 0
[  332.306570] CPU: 0 PID: 8350 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  332.314381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  332.323722] Call Trace:
[  332.326310]  dump_stack+0x1b2/0x281
[  332.329935]  should_fail.cold+0x10a/0x149
[  332.334082]  should_failslab+0xd6/0x130
[  332.338047]  kmem_cache_alloc_trace+0x29a/0x3d0
[  332.342707]  apparmor_file_alloc_security+0x129/0x800
[  332.347905]  security_file_alloc+0x66/0xa0
[  332.352216]  ? selinux_is_enabled+0x5/0x50
[  332.356434]  get_empty_filp+0x15c/0x3e0
[  332.360393]  path_openat+0x84/0x2970
[  332.364110]  ? get_pid_task+0x91/0x130
[  332.367989]  ? path_lookupat+0x780/0x780
[  332.372053]  ? trace_hardirqs_on+0x10/0x10
[  332.376274]  do_filp_open+0x179/0x3c0
[  332.380056]  ? may_open_dev+0xe0/0xe0
[  332.383845]  ? __alloc_fd+0x1be/0x490
[  332.388349]  ? lock_downgrade+0x740/0x740
[  332.392488]  ? do_raw_spin_unlock+0x164/0x220
[  332.396976]  ? _raw_spin_unlock+0x29/0x40
[  332.401117]  ? __alloc_fd+0x1be/0x490
[  332.404912]  do_sys_open+0x296/0x410
[  332.408708]  ? filp_open+0x60/0x60
[  332.412254]  ? __do_page_fault+0x159/0xad0
[  332.416729]  ? do_syscall_64+0x4c/0x640
[  332.420683]  ? SyS_open+0x30/0x30
[  332.424125]  do_syscall_64+0x1d5/0x640
[  332.428008]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  332.433287] RIP: 0033:0x419544
17:39:39 executing program 4:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040))
getrusage(0x0, &(0x7f0000000100))
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:39 executing program 2:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x8, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x39, 0x800)
fcntl$getown(r1, 0x9)

17:39:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:39 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c004}, 0x4004)
r1 = fork()
wait4(r1, 0x0, 0x20000000, 0x0)

[  332.436458] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  332.444145] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  332.451419] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  332.458679] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  332.465948] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  332.473235] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
17:39:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:39 executing program 0 (fault-call:0 fault-nth:4):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  332.599786] FAULT_INJECTION: forcing a failure.
[  332.599786] name failslab, interval 1, probability 0, space 0, times 0
[  332.612637] CPU: 0 PID: 8373 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  332.620443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  332.629797] Call Trace:
[  332.632392]  dump_stack+0x1b2/0x281
[  332.636026]  should_fail.cold+0x10a/0x149
[  332.640177]  should_failslab+0xd6/0x130
[  332.644164]  kmem_cache_alloc_trace+0x47/0x3d0
[  332.648749]  proc_self_get_link+0x1af/0x220
[  332.653112]  ? proc_ns_dir_lookup+0x250/0x250
[  332.657607]  link_path_walk+0xc47/0x10a0
[  332.661672]  ? walk_component+0xbc0/0xbc0
[  332.665824]  path_openat+0x15e/0x2970
[  332.669628]  ? get_pid_task+0x91/0x130
[  332.673518]  ? path_lookupat+0x780/0x780
[  332.677577]  ? trace_hardirqs_on+0x10/0x10
[  332.681819]  do_filp_open+0x179/0x3c0
[  332.685637]  ? may_open_dev+0xe0/0xe0
[  332.689444]  ? do_raw_spin_unlock+0x164/0x220
[  332.693939]  ? __alloc_fd+0x1be/0x490
17:39:39 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00'], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  332.697744]  do_sys_open+0x296/0x410
[  332.701467]  ? filp_open+0x60/0x60
[  332.705008]  ? __do_page_fault+0x159/0xad0
[  332.709242]  ? do_syscall_64+0x4c/0x640
[  332.713213]  ? SyS_open+0x30/0x30
[  332.716667]  do_syscall_64+0x1d5/0x640
[  332.720553]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  332.725731] RIP: 0033:0x419544
[  332.729003] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  332.736711] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  332.744014] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  332.751281] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  332.758554] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  332.765829] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:40 executing program 0 (fault-call:0 fault-nth:5):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:40 executing program 3:
r0 = fork()
syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2)
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  333.155917] FAULT_INJECTION: forcing a failure.
[  333.155917] name failslab, interval 1, probability 0, space 0, times 0
[  333.168051] CPU: 0 PID: 8398 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  333.175850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  333.185289] Call Trace:
[  333.187881]  dump_stack+0x1b2/0x281
[  333.191777]  should_fail.cold+0x10a/0x149
[  333.195934]  should_failslab+0xd6/0x130
[  333.199924]  kmem_cache_alloc+0x28e/0x3c0
[  333.204074]  __d_alloc+0x2a/0xa20
[  333.207624]  d_alloc+0x46/0x240
[  333.210905]  d_alloc_parallel+0xd6/0x16b0
[  333.215053]  ? __lock_acquire+0x5fc/0x3f20
[  333.219288]  ? kfree+0xc9/0x250
[  333.222563]  ? walk_component+0x1bf/0xbc0
[  333.226708]  ? link_path_walk+0x4cb/0x10a0
[  333.230941]  ? path_openat+0x15e/0x2970
[  333.234926]  ? do_filp_open+0x179/0x3c0
[  333.238897]  ? do_sys_open+0x296/0x410
[  333.242786]  ? __d_lookup_rcu+0x640/0x640
[  333.246938]  ? lock_acquire+0x170/0x3f0
[  333.250895]  ? lookup_slow+0x129/0x400
[  333.254768]  lookup_slow+0x175/0x400
[  333.258482]  ? follow_dotdot_rcu+0xf00/0xf00
[  333.262884]  ? lookup_fast+0x430/0xe30
[  333.266764]  walk_component+0x6a1/0xbc0
[  333.270731]  ? lookup_fast+0xe30/0xe30
[  333.274606]  ? proc_pid_permission+0x181/0x240
[  333.279168]  ? security_inode_permission+0xb5/0xf0
[  333.284075]  ? mem_write+0x60/0x60
[  333.287596]  link_path_walk+0x823/0x10a0
[  333.291642]  ? walk_component+0xbc0/0xbc0
[  333.295774]  path_openat+0x15e/0x2970
[  333.299566]  ? get_pid_task+0x91/0x130
[  333.303442]  ? path_lookupat+0x780/0x780
[  333.307490]  ? trace_hardirqs_on+0x10/0x10
[  333.311706]  do_filp_open+0x179/0x3c0
[  333.315487]  ? may_open_dev+0xe0/0xe0
[  333.319280]  ? simple_attr_release+0x40/0x40
[  333.323672]  ? do_raw_spin_unlock+0x164/0x220
[  333.328187]  ? __alloc_fd+0x1be/0x490
[  333.331983]  do_sys_open+0x296/0x410
[  333.335681]  ? filp_open+0x60/0x60
[  333.340071]  ? __do_page_fault+0x159/0xad0
[  333.344353]  ? do_syscall_64+0x4c/0x640
[  333.348399]  ? SyS_open+0x30/0x30
[  333.351848]  do_syscall_64+0x1d5/0x640
[  333.355731]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  333.361112] RIP: 0033:0x419544
[  333.364308] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  333.371994] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  333.379244] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  333.386503] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  333.393769] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  333.401040] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
17:39:40 executing program 4:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040))
getrusage(0x0, &(0x7f0000000100))

17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:40 executing program 2:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x8, 0x0)
syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x39, 0x800)

17:39:40 executing program 5:
socketpair(0x8, 0x0, 0x0, 0x0)
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:40 executing program 0 (fault-call:0 fault-nth:6):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  333.503003] FAULT_INJECTION: forcing a failure.
[  333.503003] name failslab, interval 1, probability 0, space 0, times 0
[  333.536046] CPU: 1 PID: 8418 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  333.543866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  333.553221] Call Trace:
[  333.555814]  dump_stack+0x1b2/0x281
[  333.559449]  should_fail.cold+0x10a/0x149
[  333.563603]  should_failslab+0xd6/0x130
[  333.567600]  kmem_cache_alloc+0x28e/0x3c0
[  333.571754]  ? proc_i_callback+0x20/0x20
[  333.575831]  proc_alloc_inode+0x18/0x1a0
[  333.579977]  ? proc_i_callback+0x20/0x20
[  333.584035]  alloc_inode+0x5d/0x170
[  333.587673]  new_inode+0x1d/0xf0
[  333.591039]  proc_pid_make_inode+0x22/0x230
[  333.595363]  proc_pident_instantiate+0x78/0x280
17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  333.600032]  proc_pident_lookup+0x181/0x200
[  333.604362]  lookup_slow+0x20a/0x400
[  333.608086]  ? follow_dotdot_rcu+0xf00/0xf00
[  333.613281]  ? lookup_fast+0x430/0xe30
[  333.617612]  walk_component+0x6a1/0xbc0
[  333.622290]  ? lookup_fast+0xe30/0xe30
[  333.626185]  ? proc_pid_permission+0x181/0x240
[  333.630770]  ? security_inode_permission+0xb5/0xf0
[  333.635722]  ? mem_write+0x60/0x60
[  333.639289]  link_path_walk+0x823/0x10a0
[  333.643371]  ? walk_component+0xbc0/0xbc0
[  333.647526]  path_openat+0x15e/0x2970
17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x4004)

[  333.651333]  ? get_pid_task+0x91/0x130
[  333.655227]  ? path_lookupat+0x780/0x780
[  333.659297]  ? trace_hardirqs_on+0x10/0x10
[  333.663542]  do_filp_open+0x179/0x3c0
[  333.667344]  ? may_open_dev+0xe0/0xe0
[  333.671146]  ? simple_attr_release+0x40/0x40
[  333.675556]  ? do_raw_spin_unlock+0x164/0x220
[  333.680051]  ? __alloc_fd+0x1be/0x490
[  333.683854]  do_sys_open+0x296/0x410
[  333.687565]  ? filp_open+0x60/0x60
[  333.691107]  ? __do_page_fault+0x159/0xad0
[  333.695341]  ? do_syscall_64+0x4c/0x640
[  333.699314]  ? SyS_open+0x30/0x30
[  333.702769]  do_syscall_64+0x1d5/0x640
[  333.706682]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  333.711908] RIP: 0033:0x419544
[  333.715093] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  333.722799] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  333.730069] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  333.737341] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  333.744603] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  333.751878] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
[  333.864876] Bluetooth: hci3 command 0x0419 tx timeout
17:39:40 executing program 3:
r0 = fork()
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000000)={0x0, 0x0, "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", "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"})
wait4(r0, 0x0, 0x20000000, 0x0)
getrusage(0x1, &(0x7f0000001000))
syz_open_dev$radio(&(0x7f00000010c0)='/dev/radio#\x00', 0x2, 0x2)

17:39:40 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:41 executing program 4:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x2, &(0x7f0000000040))

17:39:41 executing program 0 (fault-call:0 fault-nth:7):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:41 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:41 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

17:39:41 executing program 2:
r0 = fork()
wait4(r0, &(0x7f0000000000), 0x8, 0x0)

17:39:41 executing program 1:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x300, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_batadv\x00'})
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
sched_rr_get_interval(r2, &(0x7f00000000c0))

17:39:41 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004)

[  334.405814] FAULT_INJECTION: forcing a failure.
[  334.405814] name failslab, interval 1, probability 0, space 0, times 0
[  334.436502] CPU: 1 PID: 8470 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  334.444325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  334.453704] Call Trace:
17:39:41 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x4, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c004}, 0x4004)
r1 = fork()
wait4(r1, 0x0, 0x20000000, 0x0)

[  334.456304]  dump_stack+0x1b2/0x281
[  334.459939]  should_fail.cold+0x10a/0x149
[  334.464095]  should_failslab+0xd6/0x130
[  334.468112]  kmem_cache_alloc+0x28e/0x3c0
[  334.472289]  __d_alloc+0x2a/0xa20
[  334.475765]  d_alloc+0x46/0x240
[  334.479072]  d_alloc_parallel+0xd6/0x16b0
[  334.483216]  ? lock_acquire+0x170/0x3f0
[  334.487184]  ? lock_downgrade+0x740/0x740
[  334.491336]  ? __d_lookup_rcu+0x640/0x640
[  334.495502]  ? mark_held_locks+0xa6/0xf0
[  334.499562]  ? d_lookup+0x172/0x220
[  334.503219]  ? d_lookup+0x156/0x220
[  334.506858]  lookup_open+0x462/0x1750
[  334.510671]  ? vfs_mkdir+0x6e0/0x6e0
[  334.514402]  path_openat+0x14bb/0x2970
[  334.518296]  ? path_lookupat+0x780/0x780
[  334.522360]  ? trace_hardirqs_on+0x10/0x10
[  334.526643]  do_filp_open+0x179/0x3c0
[  334.530463]  ? may_open_dev+0xe0/0xe0
[  334.534311]  ? simple_attr_release+0x40/0x40
[  334.538847]  ? do_raw_spin_unlock+0x164/0x220
[  334.543336]  ? __alloc_fd+0x1be/0x490
[  334.547223]  do_sys_open+0x296/0x410
[  334.550956]  ? filp_open+0x60/0x60
[  334.554528]  ? __do_page_fault+0x159/0xad0
[  334.558778]  ? do_syscall_64+0x4c/0x640
[  334.562746]  ? SyS_open+0x30/0x30
[  334.566328]  do_syscall_64+0x1d5/0x640
[  334.570210]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  334.575417] RIP: 0033:0x419544
[  334.578591] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  334.586289] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  334.594695] RDX: 0000000000000002 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
17:39:41 executing program 0 (fault-call:0 fault-nth:8):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

[  334.601974] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  334.609344] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  334.616618] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
[  334.677019] FAULT_INJECTION: forcing a failure.
[  334.677019] name failslab, interval 1, probability 0, space 0, times 0
[  334.694649] CPU: 1 PID: 8489 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  334.702516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  334.711857] Call Trace:
[  334.714493]  dump_stack+0x1b2/0x281
[  334.718146]  should_fail.cold+0x10a/0x149
[  334.722275]  should_failslab+0xd6/0x130
[  334.726261]  kmem_cache_alloc+0x28e/0x3c0
[  334.730738]  getname_flags+0xc8/0x550
[  334.734533]  do_sys_open+0x1ce/0x410
[  334.738230]  ? filp_open+0x60/0x60
[  334.741753]  ? __do_page_fault+0x159/0xad0
[  334.746004]  ? do_syscall_64+0x4c/0x640
[  334.749968]  ? SyS_open+0x30/0x30
[  334.753402]  do_syscall_64+0x1d5/0x640
[  334.757273]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  334.762442] RIP: 0033:0x419544
[  334.765630] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
17:39:41 executing program 0 (fault-call:0 fault-nth:9):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

[  334.773691] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  334.780956] RDX: 0000000000000000 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  334.788473] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  334.795726] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  334.804543] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
[  334.857948] FAULT_INJECTION: forcing a failure.
[  334.857948] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  334.870084] CPU: 1 PID: 8496 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  334.877896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  334.887237] Call Trace:
[  334.889825]  dump_stack+0x1b2/0x281
[  334.893441]  should_fail.cold+0x10a/0x149
[  334.897627]  __alloc_pages_nodemask+0x22c/0x2720
[  334.902380]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  334.907723]  ? __save_stack_trace+0xa0/0x160
[  334.912161]  ? __lock_acquire+0x5fc/0x3f20
[  334.916403]  ? kasan_slab_free+0xc3/0x1a0
[  334.920539]  ? kmem_cache_free+0x7c/0x2b0
[  334.924680]  ? gfp_pfmemalloc_allowed+0x150/0x150
[  334.929524]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  334.934888]  ? lock_acquire+0x170/0x3f0
[  334.938862]  ? lock_downgrade+0x740/0x740
[  334.943065]  cache_grow_begin+0x91/0x630
[  334.947136]  ? check_preemption_disabled+0x35/0x240
[  334.952191]  cache_alloc_refill+0x273/0x350
[  334.956512]  kmem_cache_alloc+0x333/0x3c0
[  334.960650]  getname_flags+0xc8/0x550
[  334.964438]  do_sys_open+0x1ce/0x410
[  334.968246]  ? filp_open+0x60/0x60
[  334.971816]  ? __do_page_fault+0x159/0xad0
[  334.976036]  ? do_syscall_64+0x4c/0x640
[  334.979996]  ? SyS_open+0x30/0x30
[  334.983430]  do_syscall_64+0x1d5/0x640
[  334.987302]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  334.992472] RIP: 0033:0x419544
[  334.995651] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
17:39:41 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000000)=""/4096)

17:39:41 executing program 0 (fault-call:0 fault-nth:10):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

[  335.003354] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  335.010605] RDX: 0000000000000000 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  335.018843] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  335.026231] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  335.033605] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
[  335.079045] FAULT_INJECTION: forcing a failure.
[  335.079045] name failslab, interval 1, probability 0, space 0, times 0
[  335.091505] CPU: 1 PID: 8499 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  335.099321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  335.108683] Call Trace:
[  335.111276]  dump_stack+0x1b2/0x281
[  335.114893]  should_fail.cold+0x10a/0x149
[  335.119238]  should_failslab+0xd6/0x130
[  335.123201]  kmem_cache_alloc+0x28e/0x3c0
[  335.127331]  get_empty_filp+0x86/0x3e0
[  335.131203]  path_openat+0x84/0x2970
[  335.134899]  ? kasan_slab_free+0xc3/0x1a0
[  335.139056]  ? kmem_cache_free+0x7c/0x2b0
[  335.143388]  ? entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  335.148760]  ? path_lookupat+0x780/0x780
[  335.152803]  ? trace_hardirqs_on+0x10/0x10
[  335.157086]  do_filp_open+0x179/0x3c0
[  335.160878]  ? may_open_dev+0xe0/0xe0
[  335.164679]  ? __alloc_fd+0x1be/0x490
[  335.168468]  ? lock_downgrade+0x740/0x740
[  335.172597]  ? do_raw_spin_unlock+0x164/0x220
[  335.177072]  ? _raw_spin_unlock+0x29/0x40
[  335.181344]  ? __alloc_fd+0x1be/0x490
[  335.185129]  do_sys_open+0x296/0x410
[  335.188823]  ? filp_open+0x60/0x60
[  335.192353]  ? __do_page_fault+0x159/0xad0
[  335.196568]  ? do_syscall_64+0x4c/0x640
[  335.200519]  ? SyS_open+0x30/0x30
[  335.203951]  do_syscall_64+0x1d5/0x640
[  335.207838]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  335.213009] RIP: 0033:0x419544
[  335.216182] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
17:39:42 executing program 2:
wait4(0x0, &(0x7f0000000000), 0x8, 0x0)

17:39:42 executing program 4:
wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040))

17:39:42 executing program 0 (fault-call:0 fault-nth:11):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

[  335.223880] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  335.231137] RDX: 0000000000000000 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  335.238394] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  335.245643] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  335.252899] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
17:39:42 executing program 4:
wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040))

17:39:42 executing program 1:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x300, 0x0)
ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'veth1_to_batadv\x00'})
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
sched_rr_get_interval(r2, &(0x7f00000000c0))

17:39:42 executing program 4:
wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040))

17:39:42 executing program 2:
wait4(0x0, &(0x7f0000000000), 0x8, 0x0)

[  335.331845] FAULT_INJECTION: forcing a failure.
[  335.331845] name failslab, interval 1, probability 0, space 0, times 0
[  335.386179] CPU: 0 PID: 8510 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  335.394002] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  335.403356] Call Trace:
[  335.405952]  dump_stack+0x1b2/0x281
[  335.409591]  should_fail.cold+0x10a/0x149
[  335.413742]  should_failslab+0xd6/0x130
[  335.417816]  kmem_cache_alloc_trace+0x47/0x3d0
[  335.422409]  proc_self_get_link+0x1af/0x220
[  335.426736]  ? proc_ns_dir_lookup+0x250/0x250
[  335.431233]  link_path_walk+0xc47/0x10a0
[  335.435302]  ? walk_component+0xbc0/0xbc0
[  335.439462]  path_openat+0x15e/0x2970
[  335.443264]  ? kasan_slab_free+0xc3/0x1a0
[  335.447412]  ? kmem_cache_free+0x7c/0x2b0
[  335.451565]  ? path_lookupat+0x780/0x780
[  335.455628]  ? trace_hardirqs_on+0x10/0x10
[  335.459871]  do_filp_open+0x179/0x3c0
[  335.463673]  ? may_open_dev+0xe0/0xe0
[  335.467498]  ? do_raw_spin_unlock+0x164/0x220
[  335.471996]  ? __alloc_fd+0x1be/0x490
[  335.475801]  do_sys_open+0x296/0x410
[  335.479517]  ? filp_open+0x60/0x60
[  335.483060]  ? __do_page_fault+0x159/0xad0
[  335.487294]  ? do_syscall_64+0x4c/0x640
[  335.491267]  ? SyS_open+0x30/0x30
[  335.494719]  do_syscall_64+0x1d5/0x640
[  335.498609]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  335.503796] RIP: 0033:0x419544
[  335.506985] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  335.517905] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  335.525180] RDX: 0000000000000000 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
17:39:42 executing program 5 (fault-call:1 fault-nth:0):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:42 executing program 4:
fork()
wait4(0x0, &(0x7f0000000000), 0x2, &(0x7f0000000040))

17:39:42 executing program 2:
wait4(0x0, &(0x7f0000000000), 0x8, 0x0)

[  335.532596] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  335.539852] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  335.547208] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
[  335.620438] FAULT_INJECTION: forcing a failure.
[  335.620438] name failslab, interval 1, probability 0, space 0, times 0
[  335.636928] CPU: 0 PID: 8541 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0
[  335.644746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  335.654099] Call Trace:
[  335.656692]  dump_stack+0x1b2/0x281
[  335.660331]  should_fail.cold+0x10a/0x149
[  335.664486]  should_failslab+0xd6/0x130
[  335.668465]  kmem_cache_alloc_node+0x263/0x410
[  335.673058]  __alloc_skb+0x5c/0x510
[  335.676692]  netlink_sendmsg+0x901/0xb80
[  335.680761]  ? nlmsg_notify+0x170/0x170
[  335.684739]  ? kernel_recvmsg+0x210/0x210
[  335.688891]  ? security_socket_sendmsg+0x83/0xb0
[  335.693642]  ? nlmsg_notify+0x170/0x170
[  335.697603]  sock_sendmsg+0xb5/0x100
[  335.701407]  ___sys_sendmsg+0x6c8/0x800
[  335.705372]  ? get_pid_task+0x91/0x130
[  335.709306]  ? copy_msghdr_from_user+0x3b0/0x3b0
[  335.714051]  ? lock_downgrade+0x740/0x740
[  335.718183]  ? __fget+0x1fe/0x360
[  335.721620]  ? lock_acquire+0x170/0x3f0
[  335.725580]  ? lock_downgrade+0x740/0x740
[  335.729717]  ? __fget+0x225/0x360
[  335.733152]  ? __fdget+0x196/0x1f0
[  335.736676]  ? sockfd_lookup_light+0xb2/0x160
[  335.741170]  __sys_sendmsg+0xa3/0x120
[  335.744957]  ? SyS_shutdown+0x160/0x160
[  335.748921]  ? wait_for_completion_io+0x10/0x10
[  335.753576]  ? SyS_read+0x210/0x210
[  335.757184]  ? __do_page_fault+0x159/0xad0
[  335.761406]  SyS_sendmsg+0x27/0x40
[  335.764934]  ? __sys_sendmsg+0x120/0x120
[  335.768983]  do_syscall_64+0x1d5/0x640
[  335.772858]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  335.778027] RIP: 0033:0x466459
[  335.781211] RSP: 002b:00007f9bd44e4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  335.788911] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[  335.796181] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[  335.803439] RBP: 00007f9bd44e41d0 R08: 0000000000000000 R09: 0000000000000000
[  335.810692] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  335.817947] R13: 00007ffdb5cec26f R14: 00007f9bd44e4300 R15: 0000000000022000
17:39:42 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00')

17:39:42 executing program 0 (fault-call:0 fault-nth:12):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:42 executing program 2:
fork()
wait4(0x0, &(0x7f0000000000), 0x8, 0x0)

17:39:42 executing program 5 (fault-call:1 fault-nth:1):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

[  335.956035] FAULT_INJECTION: forcing a failure.
[  335.956035] name failslab, interval 1, probability 0, space 0, times 0
[  335.966648] FAULT_INJECTION: forcing a failure.
[  335.966648] name failslab, interval 1, probability 0, space 0, times 0
[  335.980638] CPU: 0 PID: 8556 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  335.988471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  335.997844] Call Trace:
[  336.000432]  dump_stack+0x1b2/0x281
[  336.004051]  should_fail.cold+0x10a/0x149
[  336.008187]  should_failslab+0xd6/0x130
[  336.012153]  kmem_cache_alloc_trace+0x47/0x3d0
[  336.016834]  proc_self_get_link+0x1af/0x220
[  336.021141]  ? proc_ns_dir_lookup+0x250/0x250
[  336.025623]  link_path_walk+0xc47/0x10a0
[  336.029680]  ? walk_component+0xbc0/0xbc0
[  336.033818]  path_openat+0x15e/0x2970
[  336.037615]  ? kasan_slab_free+0xc3/0x1a0
[  336.041758]  ? kmem_cache_free+0x7c/0x2b0
[  336.045896]  ? path_lookupat+0x780/0x780
[  336.049941]  ? trace_hardirqs_on+0x10/0x10
[  336.054172]  do_filp_open+0x179/0x3c0
[  336.057968]  ? may_open_dev+0xe0/0xe0
[  336.061756]  ? do_raw_spin_unlock+0x164/0x220
[  336.066240]  ? __alloc_fd+0x1be/0x490
[  336.070057]  do_sys_open+0x296/0x410
[  336.073753]  ? filp_open+0x60/0x60
[  336.077283]  ? __do_page_fault+0x159/0xad0
[  336.081506]  ? do_syscall_64+0x4c/0x640
[  336.085459]  ? SyS_open+0x30/0x30
[  336.088895]  do_syscall_64+0x1d5/0x640
[  336.092770]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  336.097941] RIP: 0033:0x419544
[  336.101111] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  336.108802] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
[  336.116056] RDX: 0000000000000000 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  336.123310] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  336.130562] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  336.137855] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
[  336.145153] CPU: 1 PID: 8558 Comm: syz-executor.5 Not tainted 4.14.228-syzkaller #0
[  336.152954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  336.162309] Call Trace:
[  336.164900]  dump_stack+0x1b2/0x281
[  336.168585]  should_fail.cold+0x10a/0x149
[  336.172765]  should_failslab+0xd6/0x130
[  336.176744]  kmem_cache_alloc_node_trace+0x25a/0x400
[  336.181829]  __kmalloc_node_track_caller+0x38/0x70
[  336.186741]  __alloc_skb+0x96/0x510
[  336.190349]  netlink_sendmsg+0x901/0xb80
[  336.194392]  ? nlmsg_notify+0x170/0x170
[  336.198345]  ? kernel_recvmsg+0x210/0x210
[  336.202518]  ? security_socket_sendmsg+0x83/0xb0
[  336.207256]  ? nlmsg_notify+0x170/0x170
[  336.211211]  sock_sendmsg+0xb5/0x100
[  336.214908]  ___sys_sendmsg+0x6c8/0x800
[  336.218863]  ? get_pid_task+0x91/0x130
[  336.222732]  ? copy_msghdr_from_user+0x3b0/0x3b0
[  336.227471]  ? lock_downgrade+0x740/0x740
[  336.231621]  ? __fget+0x1fe/0x360
[  336.235086]  ? lock_acquire+0x170/0x3f0
[  336.239039]  ? lock_downgrade+0x740/0x740
[  336.243211]  ? __fget+0x225/0x360
[  336.246703]  ? __fdget+0x196/0x1f0
[  336.250237]  ? sockfd_lookup_light+0xb2/0x160
[  336.254734]  __sys_sendmsg+0xa3/0x120
[  336.258526]  ? SyS_shutdown+0x160/0x160
[  336.262498]  ? wait_for_completion_io+0x10/0x10
[  336.267285]  ? SyS_read+0x210/0x210
[  336.270946]  ? __do_page_fault+0x159/0xad0
[  336.275171]  SyS_sendmsg+0x27/0x40
[  336.278692]  ? __sys_sendmsg+0x120/0x120
[  336.282855]  do_syscall_64+0x1d5/0x640
[  336.286727]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  336.291898] RIP: 0033:0x466459
[  336.295066] RSP: 002b:00007f9bd44e4188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
17:39:43 executing program 1:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_RMID(r1, 0x0, 0x0)
semctl$SEM_INFO(r1, 0x1, 0x13, &(0x7f0000000000)=""/4096)

17:39:43 executing program 0 (fault-call:0 fault-nth:13):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

[  336.302755] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[  336.310006] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000004
[  336.317256] RBP: 00007f9bd44e41d0 R08: 0000000000000000 R09: 0000000000000000
[  336.324610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  336.331886] R13: 00007ffdb5cec26f R14: 00007f9bd44e4300 R15: 0000000000022000
17:39:43 executing program 5 (fault-call:1 fault-nth:2):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:43 executing program 4:
fork()
wait4(0x0, 0x0, 0x2, &(0x7f0000000040))

[  336.420933] FAULT_INJECTION: forcing a failure.
[  336.420933] name failslab, interval 1, probability 0, space 0, times 0
[  336.459874] CPU: 0 PID: 8572 Comm: syz-executor.0 Not tainted 4.14.228-syzkaller #0
[  336.467701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  336.477061] Call Trace:
[  336.479655]  dump_stack+0x1b2/0x281
[  336.483291]  should_fail.cold+0x10a/0x149
[  336.487446]  should_failslab+0xd6/0x130
[  336.491429]  kmem_cache_alloc+0x28e/0x3c0
[  336.495578]  __d_alloc+0x2a/0xa20
[  336.499168]  d_alloc+0x46/0x240
[  336.502430]  d_alloc_parallel+0xd6/0x16b0
[  336.506607]  ? lock_acquire+0x170/0x3f0
[  336.510560]  ? lock_downgrade+0x740/0x740
[  336.514701]  ? __d_lookup_rcu+0x640/0x640
[  336.518835]  ? mark_held_locks+0xa6/0xf0
[  336.522872]  ? d_lookup+0x172/0x220
[  336.526479]  ? d_lookup+0x156/0x220
[  336.530086]  lookup_open+0x462/0x1750
[  336.533872]  ? vfs_mkdir+0x6e0/0x6e0
[  336.537587]  path_openat+0x14bb/0x2970
[  336.541466]  ? path_lookupat+0x780/0x780
[  336.545510]  ? trace_hardirqs_on+0x10/0x10
[  336.549727]  do_filp_open+0x179/0x3c0
[  336.553515]  ? may_open_dev+0xe0/0xe0
[  336.557316]  ? simple_attr_release+0x40/0x40
[  336.561717]  ? do_raw_spin_unlock+0x164/0x220
[  336.566196]  ? __alloc_fd+0x1be/0x490
[  336.570025]  do_sys_open+0x296/0x410
[  336.573740]  ? filp_open+0x60/0x60
[  336.577273]  ? __do_page_fault+0x159/0xad0
[  336.581496]  ? do_syscall_64+0x4c/0x640
[  336.585450]  ? SyS_open+0x30/0x30
[  336.588882]  do_syscall_64+0x1d5/0x640
[  336.592753]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  336.597928] RIP: 0033:0x419544
[  336.601105] RSP: 002b:00007fb337d71060 EFLAGS: 00000293 ORIG_RAX: 0000000000000101
[  336.608795] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000419544
17:39:43 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:43 executing program 0 (fault-call:0 fault-nth:14):
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

[  336.616058] RDX: 0000000000000000 RSI: 00007fb337d710f0 RDI: 00000000ffffff9c
[  336.623335] RBP: 00007fb337d710f0 R08: 0000000000000000 R09: 00007fb337d70f70
[  336.630594] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000
[  336.637852] R13: 00007ffecf527dcf R14: 00007fb337d71300 R15: 0000000000022000
17:39:43 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:43 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
read$fb(0xffffffffffffffff, &(0x7f0000000000), 0x0)

17:39:43 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
wait4(0x0, &(0x7f0000000000), 0x8, &(0x7f0000000040))

17:39:43 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
write$FUSE_OPEN(r0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x20)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000240))
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
read$FUSE(r0, &(0x7f0000000440)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_LSEEK(r0, &(0x7f0000000140)={0x18, 0x0, r1, {0x6}}, 0x18)
sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x20000010)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0)
getgroups(0x6, &(0x7f00000001c0)=[r3, <r5=>r3, 0x0, r3, r3, r3])
write$FUSE_ENTRY(r4, &(0x7f0000002480)={0x90, 0x0, r1, {0x3, 0x1, 0x400, 0x33cd, 0x2, 0x565, {0x6, 0x0, 0x4, 0x5, 0x8, 0x0, 0x0, 0x8, 0xfffffff8, 0x6000, 0x2, r2, r5, 0x1, 0x4}}}, 0x90)

17:39:43 executing program 2:
fork()
wait4(0x0, 0x0, 0x8, 0x0)

17:39:43 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x15c}}, 0x0)

17:39:44 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRES16=r0], 0x15c}}, 0x0)

17:39:44 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
semctl$IPC_SET(0x0, 0x0, 0x1, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x140, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x68, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x5c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x50, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3446df4a1a9fe808}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xfffd}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xfa}]}, @NL802154_ATTR_SEC_KEY={0xbc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "796c148c5411f9b3adab5f9ed6d28246"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0006f1b504cdebd8f635f0155e2832a78255e40ab32bfd06a34d2fa1fec4e632"}, @NL802154_KEY_ATTR_ID={0x80, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x38, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x4008084}, 0x80)
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x20c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xd0, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x1}, @NL802154_KEY_ATTR_ID={0x78, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x3c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xa0ee}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x80}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3ce9762f3d8c7fdebbd0e1ac3179c3b6"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "4ef5b33efcfd80abd17b5d109189da9b"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "0e257746642fb81acb8f52cddd2f2b7fb2f9e3e7862d72da2946d1b45654d184"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xe8, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "58524fa8fc9f6d74aa074abe32552510"}, @NL802154_KEY_ATTR_ID={0x50, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffffffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x10001}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7f}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x800}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "0b950ee747a38780d74d100e3f477157"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e0101bc53da7a74055589376f2d92322"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xf6}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e23d38f700d78e4cd9ddbe9a71a7d237"}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20c}, 0x1, 0x0, 0x0, 0x4}, 0x800)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:44 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip6tnl0\x00'})

17:39:44 executing program 4:
fork()
wait4(0x0, 0x0, 0x0, &(0x7f0000000040))

17:39:44 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000040}, 0x40000)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:44 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0)
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'ip6tnl0\x00'})

17:39:44 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x46080}, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000)='nl802154\x00', r1)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x44081)
r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200)='nl802154\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x1e846f87e55de6d5}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x7c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_team\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x7c}}, 0x2880)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan1\x00', <r6=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r4, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x11c, r5, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_SEC_DEVKEY={0xe8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xcf}, @NL802154_DEVKEY_ATTR_ID={0x58, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_ID={0x54, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x48, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x4}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xc0}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x21}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000002}]}, 0x11c}, 0x1, 0x0, 0x0, 0x20000100}, 0x80)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:44 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:44 executing program 3:
r0 = fork()
r1 = fork()
capset(&(0x7f0000000000)={0x20071026, r1}, &(0x7f0000000040)={0x7, 0x7, 0x1, 0x8, 0x9, 0x8})
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:44 executing program 0:
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = geteuid()
ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, r0)
write$FUSE_WRITE(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, 0x0, {0x3}}, 0x18)

17:39:44 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYRESOCT], 0x15c}, 0x1, 0x0, 0x0, 0x20004040}, 0x20000000)

17:39:44 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:44 executing program 2:
fork()
wait4(0x0, 0x0, 0x0, 0x0)

17:39:44 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x218, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200008c0}, 0x4081)

17:39:44 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x804}, 0x0)
bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00'}, 0x10)

17:39:45 executing program 4:
fork()
wait4(0x0, 0x0, 0x0, &(0x7f0000000040))

17:39:45 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:45 executing program 0:
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1aee2cbd7000ffdbdf1ce761d60ce128d2d863b093068c251100f3ff0800", @ANYRES32=0x0, @ANYBLOB="0c0006000300000003000000"], 0x28}, 0x1, 0x0, 0x0, 0x20008010}, 0x810)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:45 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
ioctl$FBIO_WAITFORVSYNC(r3, 0x40044620, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000380)={'wpan1\x00'})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r1, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, r2, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xffffffffffff0183}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x20000881)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r6=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r2, 0x300, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x28}, 0x1, 0x0, 0x0, 0x4810}, 0x40)

17:39:45 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:45 executing program 3:
r0 = fork()
getpgid(r0)
r1 = gettid()
getpgid(r1)
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:45 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00')

17:39:45 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x4008004}, 0x0)

17:39:45 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:45 executing program 2:
fork()
wait4(0x0, 0x0, 0x0, 0x0)

17:39:45 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:45 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x64, 0x0, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x2008020}, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8080}, 0x4000004)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:45 executing program 4:
fork()
wait4(0x0, 0x0, 0x0, &(0x7f0000000040))

17:39:45 executing program 0:
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/ipc\x00')

17:39:45 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:45 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan0\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, 0x0, 0x8, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x28044040)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d88a3be9153fbc37ce2a5cd90192f511d99adabc7d2ea81841532cc1b043314bff59770a1d46468a75366ec0434a530f9463c9e27bcc084a6805ecf44b04618fb4f4afc04161afcff60ba00195f7335297e3103b7e86f7cdf5dd4dab3aa862e9cf96560e65bc91c1a3fe5b67f22911ec193454ad9e3159e99ebbee24f6120a84e8b4560c7bf7098aaf22001657d396d80d70a3471d3f3d0d3e015a76ae7485956dfe777e13f6a98f5526f59025764d572bc20537b45354"], 0x15c}}, 0x0)

17:39:46 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x0, 0x4, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x46}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000080}, 0x40008d5)

17:39:46 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
write$fb(0xffffffffffffffff, &(0x7f0000000000)="9a7efee20ebd72bbeeeeeb6d23373e3ab7e58893413b6611a9280ac203dc65e9a713f4c724ac67bfe196806b28a7498cae9ba502be1857a2a99aec36e2736ce5f366dde912681121e42a8d6ab730e279d70a8949b731a8567e321eca6e58b1c1d8eb4bc87a7d9ab520ecd49ef6284c0a4d06116d2e549f64c05365b81854ef02f6664d35cbe5be901fc85153611fcf3f88b2edd9ae27a0f983", 0x99)
ioctl$BINDER_SET_MAX_THREADS(0xffffffffffffffff, 0x40046205, &(0x7f00000000c0)=0x7)

17:39:46 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
fork()
ioctl$KVM_GET_REGS(r1, 0x8090ae81, &(0x7f0000000000))

17:39:46 executing program 2:
fork()
wait4(0x0, 0x0, 0x0, 0x0)

17:39:46 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:46 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:46 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x400000, 0x0)
write$proc_mixer(r0, 0xfffffffffffffffd, 0x0)

17:39:46 executing program 4:
fork()
wait4(0x0, 0x0, 0x2, 0x0)

17:39:46 executing program 0:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x28, 0x0, 0x308, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xb}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x28}, 0x1, 0x0, 0x0, 0x20040080}, 0x48000)
r1 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_RMID(0x0, 0x0, 0x0)
semctl$SEM_STAT(0x0, 0x3, 0x12, &(0x7f0000000080)=""/83)
semctl$IPC_RMID(r1, 0x0, 0x0)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
semctl$SEM_STAT_ANY(r1, 0x3, 0x14, &(0x7f0000000040)=""/59)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card2/oss_mixer\x00', 0x200, 0x0)

17:39:46 executing program 5:
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wpan3\x00', <r1=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c091}, 0x50008)

17:39:46 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:46 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:46 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140)='nl802154\x00', r0)
sendmsg$NL802154_CMD_SET_ACKREQ_DEFAULT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r1, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x90)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/attr/current\x00', 0x2, 0x0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40101000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0xc0, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_KEY={0x80, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x3c, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x38f4265d}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0xbe}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "3e22edd77300b2826e56401c9fb4c90f"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "ef7e8eed56db53bc243c87c658e55bdad839d35ee47c3cbffca7c7883c8e6e40"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0xc0}, 0x1, 0x0, 0x0, 0x10}, 0x0)

17:39:46 executing program 0:
r0 = getpgid(0x0)
capset(&(0x7f0000000140)={0x19980330, r0}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/user\x00')
r2 = fork()
capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f00000021c0)={0x800, 0xffffffff, 0x2, 0x20000, 0x8, 0xffff})
r3 = getpid()
getpgid(r3)
capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x80, 0x80, 0x6192, 0x8, 0x77d6fb16, 0x5})
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00')

17:39:47 executing program 3:
mmap$binder(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x98)
r0 = fork()
syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2)
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
capset(&(0x7f0000000040)={0x20080522, r1}, &(0x7f0000000080)={0x101, 0x10001, 0xc91, 0x852, 0x2, 0x3})

17:39:47 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:47 executing program 5:
ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000040))
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:47 executing program 0:
recvfrom$phonet(0xffffffffffffffff, &(0x7f0000000000)=""/122, 0x7a, 0x141, &(0x7f0000000080)={0x23, 0x3, 0xbf, 0x9}, 0x10)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:47 executing program 2:
fork()
wait4(0x0, 0x0, 0x0, 0x0)

17:39:47 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:47 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="8376549097ee01e5ee883cef2836dd0900ad2f8e0fcf40014d8ba1bfea18a343fb2542af8337ab5376bd4b2b815abf3be4"], 0x15c}}, 0x0)

17:39:47 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xfffffffffffffff5, 0x0, {0x0, 0x4}}, 0x20)
read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020}, 0x2020)

17:39:47 executing program 4:
fork()
wait4(0x0, 0x0, 0x2, 0x0)

17:39:47 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000000)={'wpan0\x00'})

17:39:47 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = getpgid(0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
getpgrp(r1)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00')

17:39:47 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:48 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
sched_rr_get_interval(r0, &(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
clock_gettime(0x6, &(0x7f0000000080))

17:39:48 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x3}}, 0x18)
ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')

17:39:48 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:48 executing program 5:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x15c}, 0x1, 0x0, 0x0, 0x8814}, 0x408c4)

17:39:48 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = getpgid(0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
getpgrp(r1)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00')

17:39:48 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = getpgid(0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
getpgrp(r1)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00')

17:39:48 executing program 0:
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = getpgid(r0)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/net\x00')

17:39:48 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:48 executing program 4:
r0 = getpgid(0x0)
capset(&(0x7f0000000140)={0x19980330, r0}, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000180)={0x2020, 0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x2020)
syz_open_procfs$namespace(r1, &(0x7f0000000100)='ns/user\x00')
r2 = fork()
capset(&(0x7f00000000c0)={0x20071026, r2}, &(0x7f00000021c0)={0x800, 0xffffffff, 0x2, 0x20000, 0x8, 0xffff})
r3 = getpid()
getpgid(r3)
capset(&(0x7f0000000040)={0x20071026, r2}, &(0x7f0000000080)={0x80, 0x80, 0x6192, 0x8, 0x77d6fb16, 0x5})
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time_for_children\x00')

17:39:48 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="0c000004", @ANYRES16=r1, @ANYBLOB="010027bd7000ffdbdf251d0000000c0006000300000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4008000}, 0x44084)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:48 executing program 2:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
write$FUSE_LSEEK(r2, &(0x7f0000000000)={0x18, 0xffffffffffffffda, 0x0, {0x3}}, 0x18)
ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000200)=ANY=[@ANYBLOB="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"])
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00')

17:39:48 executing program 1:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:49 executing program 3:
fork()
gettid()
r0 = fork()
wait4(r0, 0x0, 0x1, 0x0)
semget(0x2, 0x0, 0x224)

17:39:49 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x54, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x10880}, 0x48804)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xa56cb9bd6c733f1c}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x34, 0x0, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_PID={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004040}, 0x0)
r2 = syz_open_dev$media(&(0x7f00000002c0)='/dev/media#\x00', 0xcaf, 0x121880)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r2, 0x80047c05, &(0x7f0000000300))

17:39:49 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x40)

17:39:49 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x40, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_BE={0x5, 0x10, 0x40}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:49 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:49 executing program 4:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:49 executing program 0:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x6c, r0, 0x2, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x48000)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:49 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x40)

17:39:49 executing program 4:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
sched_rr_get_interval(r0, &(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
clock_gettime(0x6, &(0x7f0000000080))

17:39:49 executing program 2:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
sched_rr_get_interval(r0, &(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
clock_gettime(0x6, &(0x7f0000000080))

17:39:49 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYRESDEC=r0], 0x15c}}, 0x0)

17:39:49 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x40)

17:39:49 executing program 3:
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = fork()
r1 = getpgid(r0)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
sched_rr_get_interval(r2, &(0x7f0000000040))
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, {{0x8000, 0xffff, 0x0, r1}}}, 0x28)
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:49 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, &(0x7f0000000000)=0x7fffffff)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:49 executing program 0:
ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0xc00000)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:49 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:49 executing program 0:
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040))
r1 = getpgid(0x0)
timerfd_create(0x5, 0x80000)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
wait4(r1, &(0x7f0000000000), 0x20000000, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'vcan0\x00'})
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:49 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}}, 0x40000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20002841)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:49 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:49 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = syz_open_dev$radio(&(0x7f00000001c0)='/dev/radio#\x00', 0x2, 0x2)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000300)={<r2=>0x0, 0x0, "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", "d14ae4132aa910401ab278e660d549b9fbe965693cdc622f9bb40941c47e1a1cc767f43809fec76eda1948c7994093d3f894d3699478453c59373208e2b09c74ca3e816526e04a8c7d25bf61a1f99655842d3e76fda6ff4902fd31be61e9427e6aa9c201b3e6afbec8185a943b535bdc7bd1201f16df23c9c0751a5dc38ebd6089f79d633978ed60e9176a0d1c462d01736ec6d87ce64c16f815c1c4073fad71e76f1f450f622041092f20e381d570f7cfc025dcc99f8a3126e43fa1cab82b389a404f26d78e6456187a2328723fe513c1c59f87416e824923aa7fc0055a0cef7e22087faf1a80907d4b2bc46f2c4109664f4f11aacc8b0671e97c38d3355049da3eb6a47e281443a64f03fcafc259cdc60dc18ca9a5b534593616f970524b5f69e9da8631bd4798c84134a23657bc19a8e1bfd00bc7b44ae10bf50333feaf5358517b7555dcbf9a4e8b21f8df36c30e5ad3cad9793a5ac16a7e614e78fb045f7466a5dc87eb5107c8d07bf0f1176cf93a721fdb8d3db7fce74e420a3b681700baf09e6f92ee3db5625e24e7c41bbb1ec24e4f62f5d4b837f7b57cd4e542a43af95f33f2fc764a8e23c7d480ef191214320a3b7bbcb7a947f88f177b8ccf59fe220c1c7f9169f95f01fe4dbe65a1806e9e09751dd4a16baec3dd2d4c48097d13a7d3ed5338fa5fe023579e18c1cfc97b42c94afe07df4d7661dd3b4d22f183d6d5abc389763fd3074e60de7327e46e3f9080561caeeffc9a6b010055d5a4452608010880280c04e4a6cac71cd68768c7f21aaa17d0fa5e1a164d2068893b91c2fe9f2ad8e629af3e7554d7967f6199ec57dd9047fcac33b352bf305e60d7ec95583ee7f483897b7573e364c124c1b5ff48dad0e2b8ea1aecbbd1123f6e0b3433602faa28da55ab92162f15dc4acf3c0f958e5933e7d72a96ed94670797618f865c44b475433f61365cb7171dcd7b98296837d63199fbc04c8b5485366a32977dbef40bee626b76715f522452cee8acd4cf422c335fb433bad41b5c104c230209653c6caf96c20155c62eeb4a93760bf1816eac693a841058f5e51ba6576f40b0ea620f5a61272157a581c1bc2393e95297fa878c290071f9eb8e02a82c521c097fdfa72eab124514148e2a7394bab806eca7894aeeaa56288e258acc76e277e6e9fb9a5a31508bdb6541128f95ca44f7124eb1d5a5712f2028f18cabcbcfab732b0e810e7011f0da0356bbdf21baa5b2a31acb919a38bed4ab8addd41470211ee9236001a00082e22ef07348972b25dc151fffb6ef8e9f8d9e0c3349daf92295611004af0fa77279210e8c473e5a70e959271d2db09d00ccb4be058f19d2da0d900e145e1ceb02891d0745764ed62cd2efddcf982b1a685dbfa25c5fbbe6e966c46eb2be219c699518f902212b0841c457b59e61844ff9f90a4202d08c38b00451b461a8e08413341fca660bbf6a8372ba25decb120a6f1ae6bcfd4e8c7c910c5fb37919f6235f72f8384d6849acc1bb12f5fd7ccf17c109f242db737d12ce5fdad9fbc1444e8a7a7f2d3d4c9c3f5db9b034faa23a7fc6ecb9a08f358118a119a3d5d8271578797e800664b390390f3bf4822b2ffe6cab5cdc04ab918467e0adb4ab9bf39d9f1c649f72a6b45c7c371339933a31fbfe1a99304e58fc8429ed247c3ff8e6e09ecd15e175a2b2aa74e67a72f157005c435bc438526ded1f2aefc928401ca0b72b1273af197f2a51cfd123e760f0cc4836d7be5a2f47b38282098c019a06aaeed7ac7e8dd57fa72ef7f57ef51ea19a964c33562980019a82ba8e9e080b2ae1a1e68556b02260d04c2562193b28e6faa4a1d19e89a501d03d57e74267c5144037887cce6d0b0fcc363851614e8be6d8cd29dd338e54489a8b4cb527f87fa5943ed16d8738dd8c6fe988044fcd8743364655a6805f9bd395bbddef481cbf8e5bc95cd76c6e7a5db3c96a6a38142b6202278672650d83af9005ad438e1b9cb0d6424481c0eb0678404b3c6dcc553ef6899ef4c7aa892a3f1c96d463210fd4ee6b8186da7fdb42deedc7c92000722d159e580fbef5066d216e8255e71188f300c7124c1e5f1bf4318fa7c4dd92e3f3d1b7d87500befd8dee949a72edba46486290cdcb1906afce78dedea75f1fac0051f6388e644a8bc11e59a1518c578ff9cdb14108c55565b6c73ff4f2a3e8c52639db7ea2b23914b6b179a22732f2274f8702e5a72aeea6ce1b4fa76a29d71f375e405a9fe63c71c96acab21f9f15cf0149087537bff62c917673a2cc100ddc96e129e338ca78c93aae19a89a8d55042f3024ba5989c54bc5a792003f50aa6efa8ba0663876be296bc9e92f5a76c9eb8d44592587f86a9d5aebf93dc7685683191880ee034e7302c77af6521a9c48a650ff3ad8296e47d7c776dc5cf48e1455097628eb487393206b785f0568e3c3d54b552a16d18d3ffc6b20b1a89190dc94b322ff34bda9fa63c685b6f68872913e7fe76f56f5d9a030a4414b10d185274e80795e8ee764495507cbfc08cccbdb5fa5e6319405a345c02d74c8ce87cbfe49e7fa29f59ccdfda7d3a4e66ae4bbcc29e1c6f1079115615394e00249744a1a53181ccf39bd65841eed819ed1b1f72a7226e14c18071e7311f07199c2a89e9434709bdf55a88ee9772d2bf92e316a19190778830f698e7b9a290bfb3e0ab4c97eea29d4c58cf8126b4c96e5eae781b76f833bc229e307e3c93837ff2181bbc554d266118303ba87bfe6f47645f2ef61d629ad56515c8a86518e37637f56696acfea8646907ea9cee3ab5d32b94c3daad4e4653f84c2b5e10e7d1e41ca70a1f7ee384d7db088369bc2abfc265eeb20ac78448a6443b57e9401dc07d1f26354c7cf340885641ea063ca70c1d81f74f395fb3cecfae56967408c33f593c528cc3e0974443f4153fbaab2e19cf61db69954f249af0c7613fbe8f2d9624bab47779fc0fa989f66084f13ef41287b74362f9162b6a9e99b52c3145396cc604530d0a42bc31c1ada7d51a9342f4a12ea4fff2d8d0121dce81afdf3a03e6d20ecd2192f3f52e3f625c1a2a3324ca3ae2371fddc1905ed0e7bef7a9ee1869b3d4f13bfa0efcec395620f1f78ad3303ea1ec0968bc69edbdb4842fae718355a96425500cbf7b752908e1cd454c100a7dffe0cac6e99ff0e419f1944f5948a3e5d7109f6aba55f85cb78fa81de4dd7674e9c40398d8432917204a9f3d4f5aea439edc741a4c590c579689129805c7bd259eb8facfb17cf6ee1aed266782b414c1dccae89489e7165d84358fc87ab0493fbfca8eca2895e9f5a10cf93f715d3934488ae922d071448e3ca1f0e5faf778f58d31dd9b51ea76aef9440a87fb8308d394cfa5e7e11db1437d1009c191c1e93d42c110c2f4911f5b11f7ec212d7a8f71899b64e4814872b1679b518a5c64425d705a79e42110644ea873b23f638134eec226e8b50f435d526cbe174998c62246dee463e31c7d01adb9d808330691eccc692bc55cafb627e3083d62b7115442f88c7ad6e19d36f3a62f91d986f7eccfce6e9b2d52a58c2d3d4cd972caf412a702845f2c1662fe022aeaf7fde4a1785d789cf58068d60ea441476bf30b2bbe924e92cdc2817cd72e716d5f3187b0f93df51b054fa7be59e15ff5f58a049238874066a0a585d2d03b1e99bf83a0b05c9465d6b9d9fdadad7db50e3476a56a212f9f22fa95a0b7192798c9948b40f3cb64982bc28e4a9e9272cce0e34a373f07908acae408f59bbfed6f9a13840284d12b159fdf85016a48d5136041b2875f3739f15cf330a4192c493a22a759d0b7e288fd01f7c475e3daaa5aaf3d74f1237608ec32351ffee069d1f70798ff6c72f58c36a9ebfea69f5e3eaf558ee29b760b431b71692eae2cc1d3f664b81cacbaf83641b5ae0dcad6cb6665f249cc0cbbb227a1f58e78eee2f45d14ec348360d36dd68bf3c0493b035f27584becef88b7e1b6ff54a66e3cd2c3bc68d5770a749e8157f663f2ca820cf20027633aa47d97bb772de5d5cc2937bf4dfb518a44d34d461e5e51061b6febdb2cf29e41cd787e36d17e29ea42a240d6c4ae0f9d61c5f04474ce7b9714d1f9b360be21ec3c9108b0e0f34116824fc785808dba174adcfb53d96d45a37882ecb20d61a529dc0eb2de00dae01e99ada7543e8610598123e4987b728c361601255dba85ec138d54d820e8063edf9316606a89a3aeb9b560743c49adbbd81d011ca1bd5f07016a912e6c32def7cabee347bea940a741b01016058cdca6d65dbff6af834b91b64269110d55b69c3f923eeb3b0a1ee9b4893f9de090e9d8de4378324046c9c3038e1c2705b4a57067a365a814fcd130441ff62aa4be202b29f31df2faa6c496483e2bc8d179e4714ad457b900983fc94cc19c5a5779e5c9033861b564ec9ad4c45548f5f448a2bd8d1c8e5dedf607fa8c266ee0dbaf6e73ba4328a0f5181c09f2a89d848293078c4e2881b91834de1d5363ed9a36b60c0890ce4099a8e57683341bdd057294301dfb394b5327c0971128da9c6b5733d794ba1c375b15093cca96fefb5514279e7d21e6cd1a4cf6741a675481103cc903d8cd1a21b8d3276a86f8f0f47804b71481b4ddb8b0fa0147629b03ef625981c2ae8ccc193c2cc2099259d91f474006d9cfd78a66dc3fe9a5e2eb96fa5ba9fa57ae60a586099595b94c5ea5bcb596ccd32ee8cd23e204375e62c26ff111b33c5e916f1e32b3e6c4526012ef96016db02f8949c81fdfc6e10b8cb2e4f9240f232f828f05bb132f669a7995597d4e72097f7431f21b661279d8cf683528a6cc804c62f6c82fdd754641f4ea14de4097cb0404d1e725ec6d5dfd831467471edc8906fa46c03583b94fa818b1c10b9901549be1c4c9f5ffe7a43700d817692323d0f536295b1516802a6ed8de9158c33cd56dc1d76c6d1e1fb318da2c6cef3fc9d2a33581f3e0808b0b286046f85d4201300a2a5b0ce1b73960e171c1c5ec4841720cc7fa47ca6abe6bb6714ea9c6cd632461d1382a636d6aa2e253238dcda7c2c2931fe5e8afc486b5c5c970407f2b33b03927418705e08339446301cf19e90f4488bb4be9e9d59f634e5fcd539e6d44823429405255e15d377ba4102305ab8e4a6705e6f9becf631272c1cf2c05f679b5cf5f24bdf0f62d4e504f02c4e76def6bd24db7aa345bbcec4cdc5d746c3e6b71f0b4165c6034da56769614d03f72feb7f62df7efea109331f435b130301888c0fa41deae89362be918e4ea5e2b6312f72daf1a267f6adc72890b56110d6d7bc68e8252a7a9031c9814fb0f4d822472ab491805001d52362bcd0b72b9e161d2d15ee16e13acf8c569287bd4249293f81d389ae89ba69a9cbff4259daedb5eec818ff80145aae23b558cdf4beb052e014ab91bfd7f858"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r1, 0xd000943e, &(0x7f0000001300)={r2, 0x0, "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", "86a8d953b8f7199e6315eaca47286c1a8e7338e07e37b17258b3371ebfe61d403232a7959f97f8213404e8880acebc085537f594f8d5814733a7a390c40e858db58b6f93595c9fd533ad74d184577e02730025ca46ee265aed7f4bb5029f8a5a71a8b4abfd0499c6e0ea879c2b37dd6b4f4b12babd16b0c72cabbea919ee343b2283a6d8e74d0d6bc8b566fd78a242839b4d732c384608dd320a0ddf50b077837488feef6fd05757315c59c094ed01309d591597e21919f55acbd235bde7c4fe1bab74f74bff4a1df3f509cd1e5a4a80ae95b8fbcb4596021a2d2618ef51baa544ad9b34f61426c386842d09b06432923d4496800b7df16ed4a744dc5ce640a50ec2988b311953da902c920ed4c8711a095ccb3c1089af453d7a3218e0353f4d555eff8f7205f4f4bb81f3b8f14894a7fb9bdb7294e1f1d30eeaf3b0a1094fd162035aaaecc6ca3ff88588b83c56ce5c860d13d90a31f1c0c360ca69e57fa7e932a2cdd67749c00671f83d8f2d9203a18e6f39348702dad82a51d489d98e106db5fd8980271badeb938b29ae1c24fc89d30aaedd4584a4e1636d118c7e1c8a4660fb3704bb8f2d9475ac0919f693b1c12fedf1bc581abfa34fd93f05e9409fb0e961e3454bd40ddedfbbc17fd5f3e4e98f201b07c3b497a5cb0dc83bb2325aacfca9a5d2e6b6b741a85e22e19d27e632415f38679b21f70d3e505af62f665f45ec0762e2d52991f95a52452060f43be8cd60a72e74010951b372cb8a78d67964cad107cd77fea0dbe3c959dfb59b905886ccc2856790a9c2f095c07df8e11ee290b47fc9aea0a5c1402eddf2cc1c9e813725b3254ed27ed48adca5bfa8065e54055f61ccd123cf54d6ae2b1292519a365c6b824b0d29bb18baa816fc754bd336d33504d9cb80240edd12dade58969665a4aa928255a862e093361ceebda2b2b215439d0739e55ad78ed73e95e4fd1efd4786c57ef2e2ea1a13c1620cb880ee2269e499efc0f1e1a08dd7756b3cc7aceffbfb1ca05cfc9b3a8a9d65db6d0a2f066c36f90354d1205f5b310b41def4b6f6f96fd5de19ef93ea4bb53e729214ab5bbb404fa738f27928699710efe33196fd9f019e45fbef1febc42d87030824f256934257f32dbe1efd47bd40eae4c35627f983ccd2130e00bb0909e248316f40d5062201b99a8e542f461e9e70e22a745c2727358b46a00e7a68850b39d80cc1ad44cfb0e53ea1ac0e001dea79871a2168b0d09c715581690dcf08c60c47d19ff0945cfaf550021d7799ad6008450af3ced2afa898bbbc5433f9d0c37be8a767f968ff557e491fe85b661bee59458cff38bf291ca7392aa61e38594124148ce651a0145c3dc7b3e85b135150909fbc227c92a31820f19bca0bf161604ff94d3561ec857c43bb09e82fc5b44c81006a9403111b133f88f9b284cc6cbe895e683b16f13174916e4683099755ce340643d5da48acfca7c2f895c802a99dfa2f82e1805f8247ea1909ceffa786ac5cf7ec0e8177af491ba7c563e90a0ff8f21c3f6f53d19f55b389cb50a8192beb7f7017a282353e8a9cda919b927fa114ced74170606389090ab5d89969ccaea66b2e14f58e0eecfd24e748f36081cba76350017feb39b89e1370f55c4cd628e87ba8d82a26bc56e16286fac50e0c5a2b59e964ed838352785739607e9461d6c28f9786299f1e1c25a450c7f373370bda975fa4e1049820f5eecb097f7ccd646cd475aec243bc23606a6683cba203294ec6dc72f2f5b2967de4a115aaa71ecb40b8e590b2da0c7e07d1ec1ee97b65e1a30a24b31caa46ae234c24e2d0415c0b01a3867d66829db6b06673586197caf96187b5f4663fbfe19bbd99a398239f7714dac2dc72dd7c7b23a3e6b443589c0d621a6626f37bb770b29eecc825be1b1651d6e6d33569c3a67e6fa21cb59b5d589e7d941b735dc284e6c28f53ba052a9090f8ff6e3f0f6102ce05f9d5c45e9654b1af90206a88d066df2be305463a1dc1b68b26a629786e058bb22170b16655b97119ebe9ae3048bd0f7cf0da290c2dabcb0e845dc114aab8ddbff747dae71a6c109b9c58346d6ecf026446fdd6f490228562b2810c92d534924b6f34164e859471b4a5159f569fb619b06d84fa6550643194d0cf41c5a45a2f38a1f549a378e247295f4c8a1bda62fd51f1d4794f97543ae89623ecdbd363565c77ca01099b9e2f152f6dce0797faf4771a5bb474e81b890043d771f8e3d8028d5963af8a8400c60e27f73d5e63f8bedfaccfe3080ce98f6384fb290496cbaf3a979e4df12adaa0af3f22e9269b3738ecb626264cf12c8ca4c16af6bb09bf2ca8ba241cbcaec88ac07be1ee9e92a8ece70ec8d46ce543b1a89c9ea2e1371a8186f146ef514a16b3d3cb96fafa18c4b9147d7219cb924038e2318d6be36fd25aea0d8b6da9ad427aa250f4be259db3c3929891b0a796c0d83eb091e742596cf4e9ad395e58bf3786d563316c454a73480241cc81ed776e0f198cd03b5bad81189fab329307bf7cbe1bf8be52c4171db26998208aaa7a3b71deaf88eba838ff064e19e547b15b72ec9a8d772785fcc9512165f747ce6d0772a5c4f1b08a2af7645afae5feb89e37e1657336cc238f60bca4a3030bcd55c5b8ac9fdad249dd6acaaafd964b49eab0f3b316a0a570b3b918d41d68dfa9fd2c7d262da6a487dd4b9eab4518bdf14552b4419927a9b59da57dc64b5347bc34c3a24c9cedbf6b19b54cd39c51207179485d18cf8f1a5a52eab96d4f16050b679bed9aa600ffbda197345c31320d772330beccfda4eb2e675595e93ec89098393e3a79108f0420286cb9bc675cf047fb4770685f1a1ab8a83998d7eff3747c1976c3ad7c8da9db4bd6266a73f232d7a6e988fb023b008319bdfd097ad53fc1b38a8a4279bad2fd7df5dcaab07308a4178bd70e37e3f65a783a634c4befd9d7d4e0d49e1b9909fcba8e14c0567b45cd62debb18bb64484f4143a8d2dff44b4e1dcfcbb235b5fc717dbf995e99eca783b09dee18f929f5acacdbbbbb7f77e6e29e25988ad6027c78d309168f9f1e727a472d42ac94fbad3c81d1c2b807f98da60ccf53f7180a1f8d8e9f32d729fbddccbcfbd1c944da4c2263d795f9a27f5a2d5a08abe113f894b1250225500b9c0830e6074b2dbc8f279af4d984ea82577effa4afd58036f360f4ee94fd500e5a843f60c4ffb65bff2d96c81454c7853cc9d68aacf00c0701fc52d329c0891edf44be93cc498e437687c2a005eaa3dc8cbdc518dfcbb9896e1e705674a70b95e87eec032d2dda3637e070b14087743b611b9e65efc987a01f2650c76c241086aa48990f5ab638cf88de54700291558cd868bd3b72f848e8f6bff5d15ae3530573fc0bcadbebc4708879138e3028327e239721bf217b9ea1e5d22dacb229d4a1c62942548abf2502fe877941242b7b87e7ece082bad3079e4586d833e62cbd9e05b22bdeed35c62ee52dafee4b43d5da35c8339275a770a316242a8d2e82938feec944dd4ebcc282b869486b3dd642b9eb46055c632e78d3611705e69384c9024048c45158f16ea7e0a9fd9a6c5a49a35516b90203119ba31b6a474c15e8f018a5ad421fe7c4bf9c215c4e3c8c960f9f23eaac5a8067ef8e43342859d4611cd5ea04e0f5d6acc85e749d85c5eb5de5d32580b82b3ea73d6a3b5708dd6afdefd12ca917e6d65829a1bad8ce895f431404fa26610fd20732c579642a2a966d0447bfaf0fa6c36dfb83e97ad9b3ce635d294434af96551d647f4385f7086adad9a586c8aeac9630b282983f4a6810ff75c47b9efd222929dbbf0bfb410855e582f6ccb44fbf3dd28e6be795c71cdcb80cb1e953cffba9a06a7b2a56ab6e87a9ddc281b878d0808da09a99c3d00549ea010a76d0676a76d893c5fe303c5281cd76602b668e329e10c374819d98d7a84b8bc38fe75594a4500a78c76e379dcc4384448122d2b4d3cc5576f03dce1fe10e8b7073d3074bcac9d7b831d2815061dda2aca754d0b4a6ae237fb6de2802ddbee37354e9a890cb57e3bcbe688c1ac33b6c405865e17d2af4023d98d1201c3131822b9a0233c3d6e25f2b9e0cabf749e861f349b9ba2e58604ba94d3c042f153a49910484c7ee717df66aa159d04d5ad9f845a83137dcc330549b5fb3373790df153bc1242e9e761dd0d2a8e906b78c21851f0c14ad58d962f8639e606c4499ab725a5f8aefc1b785ba842bdd6622ff30bd7faef51eaae66e10f2f53de5db96b9270159a3789a4c1f2f866cc76f832e1d8bc834b825f2299cda914c7872617dfc545d4d0be84805a6af08fa5ad17e0366e99075bac542c96b7eefa6775c82e1a21eb90db4b4485c44706b9a1acbfca1749e7939b8b055088c4b8f21793dbe27a4978ef3adb034e31e818496bbc4bb86a7c023bc183b018139fec365bc02f8740ddfc2561167e48ec6981ea8df1e3505214a28d8dc211b88967e8187ec49388e598885def6133a9547ef8edd7595d890310f3496e57a9e9a3adb6a07271ebcab40ac1ec6615c7583019a8ff36790a13480b042e4d80b04f79fbf8baa777366faa02580466e247f600b2872c7c88a03b19ef232096e30b22eb209a3fe049034855c5901b35d8b74c74aed5378ec464fb56f5faeca084f0ecaffa1c7c5b72f7f82a3e2066732db4f1b045be68c8e80c84600f321119cca251a9411969dc276ae371017d3e445b66fe234e7a84651e5e32cbf65a072868535d5fdde0a2e6a1f14e6a37f144aa122272e9b524ac05ecbbe8c9e05c2f481df4f44a69303222e926d07126b500b11addf518bb2c6329d5acf3cf85260e429c63bb1e43c885b76fe00449091befbe028ece4604eaf54093dab15310630d9afaabae8b9c6a56c0678739674a5631d3e7545f57df69ad39341e2f718800584a7de876a863e32611484c2d3b6ab4a45189be1e756cb5e97566fbd4f5c946f39009c7de0abb575aecbf8a03dfb2ff7b6d15ca22f251caafccf52ea0d7ea20133eb394ea41be64c07af24d72fcbaa20d2f9a7c62c9bd14ab0cc6ebca108c3ef1b148ab4b21468f946f8d31a73b95a53ab015e82abd4183c7303e476def48fc5c803ef9cddf327dde62b2c7c9c53c0be43ea21d15504834bd19eee4e32726cb4cd6f934bc3082c9fc232bf49bbe0fb53cedccae5f5f3ae8d5df3ad96d3f1a3e10bd054774bcf7b583d8e203b725ab260159971227f224fd7a32673a075e20acb76ac36307930f0702992c76550acbff9dd8ae38dd96a3d5d6131c2fe1b5798617c593ff77ff4415c57d68cb6efd7dad716eb8c6d4e03a4e6117f4989e31ede84276633247865d8524ae18efd16d7e172654d3b32c5cf3a92eb44a388d14c30c5dd3170f7dc0b9024d21b8bfe2bba9d68628f61bd4f3eaad9b39851"})
ioctl$FBIOGET_CON2FBMAP(r0, 0x460f, &(0x7f0000000000)={0x34, 0x2})
r3 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r3}, 0x0)
socketpair(0x2, 0x6, 0x5, 0x0)
syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/pid_for_children\x00')
write$tun(r0, &(0x7f00000000c0)={@val={0x0, 0x88ca}, @val={0x2, 0x3, 0x2, 0x5, 0xac96, 0x8000}, @ipv6=@generic={0x8, 0x6, "e79013", 0xac, 0x2b, 0xff, @ipv4={[], [], @empty}, @local, {[@routing={0x33, 0x8, 0x1, 0x1, 0x0, [@private1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, @private2={0xfc, 0x2, [], 0x1}, @private0]}, @routing={0x1d, 0x6, 0x2, 0x8, 0x0, [@private0={0xfc, 0x0, [], 0x1}, @loopback, @empty]}, @fragment={0x3b, 0x0, 0x8, 0x1, 0x0, 0x4, 0x68}], "191b648089f27516afeef121c8806b3698a68098f5933eff8c1a57dbd3bdb5827230dcbb"}}}, 0xe2)

17:39:50 executing program 4:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
sched_rr_get_interval(r0, &(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
clock_gettime(0x6, &(0x7f0000000080))

17:39:50 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:50 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000000)='nl802154\x00', r1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:50 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x54, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x54}}, 0x40000)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, r3, 0x2, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x20002841)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:50 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x1d, 0x5, &(0x7f0000000000)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0xfffeffff, 0x0, 0x0, 0x0, 0x7fffffff}, @ldst={0x1, 0x2, 0x6, 0x4, 0xb, 0x50, 0xfffffffffffffffc}, @map={0x18, 0x5, 0x1, 0x0, 0x1}], &(0x7f0000000040)='GPL\x00', 0x1, 0x49, &(0x7f0000000080)=""/73, 0x41000, 0x10, [], 0x0, 0x1b, r0, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x4, 0xb, 0x1000, 0x3}, 0x10}, 0x78)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:50 executing program 5:
read$FUSE(0xffffffffffffffff, &(0x7f00000002c0)={0x2020, 0x0, 0x0, <r0=>0x0}, 0x2020)
getgroups(0x8, &(0x7f0000000040)=[0xffffffffffffffff, <r1=>0xee00, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xee00, 0xee01])
semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f0000000080)={{0x1, r0, r1, 0xee00, 0xffffffffffffffff, 0x9, 0xea}, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="c4e7d4d857d9b7a1acb695d071469e2edddd5f4438a3552e39f6013203445d7cc647e3bcde82ec39f33de731efecaa11def24d69a21a810f"], 0x15c}}, 0x0)

17:39:50 executing program 3:
r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2)
ioctl$VIDIOC_DQEVENT(r0, 0x80885659, &(0x7f0000000040)={0x0, @ctrl={0x0, 0x0, @value64}})
r1 = fork()
wait4(r1, 0x0, 0x40000000, 0x0)

17:39:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:50 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:50 executing program 5:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x2})
sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:50 executing program 4:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
sched_rr_get_interval(r0, &(0x7f00000000c0))
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')
clock_gettime(0x6, &(0x7f0000000080))

17:39:50 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'batadv_slave_0\x00'})

17:39:50 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:50 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:50 executing program 5:
ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, &(0x7f0000000000)={0x280, 0x0, 0x320, 0x640, 0x3, 0x8, 0x1f, 0x1, {0x10001, 0xb2b}, {0x3f, 0xcb8}, {0x2, 0x6}, {0xfffffff8, 0x40000000}, 0x2, 0x1, 0x9, 0xfffffffe, 0x0, 0xee, 0x6, 0xfffffffd, 0x1, 0x40, 0x7, 0x0, 0x30, 0x1, 0x1, 0x1})
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan4\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000300)={&(0x7f0000000100), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x44, 0x0, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x14}, 0x10)

17:39:51 executing program 0:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')
ioctl$FBIOBLANK(0xffffffffffffffff, 0x4611, 0x2)

17:39:51 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:51 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:51 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000001000)={0x15, 0x10001, 0x7ff, 0x6, 0x1058, 0xffffffffffffffff, 0x2, [], 0x0, r0, 0x4, 0x1, 0x5}, 0x40)
ioctl$EVIOCGBITSND(0xffffffffffffffff, 0x80404532, &(0x7f0000000000)=""/4096)
r1 = fork()
wait4(r1, 0x0, 0x20000000, 0x0)
r2 = openat$cgroup_procs(r0, &(0x7f0000001040)='tasks\x00', 0x2, 0x0)
r3 = getpgrp(r1)
write$cgroup_pid(r2, &(0x7f0000001080)=r3, 0x12)

17:39:51 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:51 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/time_for_children\x00')
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000))

17:39:51 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:51 executing program 4:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
sched_rr_get_interval(r0, &(0x7f00000000c0))
clock_gettime(0x6, &(0x7f0000000080))

17:39:51 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:51 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:51 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000001c0)=0x507)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000080)=[0x2fef], 0x1, 0x0, 0x0, <r2=>0xffffffffffffffff})
read$fb(r2, &(0x7f0000000100)=""/189, 0xbd)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$SIOCPNADDRESOURCE(r0, 0x89e0, &(0x7f0000000000)=0x7)

17:39:51 executing program 5:
r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x0, 0x0)
ioctl$EVIOCGABS3F(r0, 0x8018457f, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan1\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x30, 0x0, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x30}}, 0x800)

17:39:51 executing program 0:
r0 = getpgid(0x0)
r1 = getpid()
capset(&(0x7f00000002c0)={0x20080522, r1}, 0x0)
getpgrp(r0)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/user\x00')
capset(&(0x7f00000000c0)={0x20080522, r0}, &(0x7f0000000100)={0x200, 0x3, 0x0, 0xffff, 0x8, 0x7fffffff})
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
gettid()
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000080)={0x73622a85, 0x100a, 0x3})

17:39:51 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:51 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:52 executing program 0:
ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x9, 0xffffffffffffff01})
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:52 executing program 3:
r0 = fork()
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
getpgrp(r1)
wait4(r0, 0x0, 0x20000000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
sched_rr_get_interval(r2, &(0x7f0000000000))

17:39:52 executing program 5:
r0 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_RMID(r0, 0x0, 0x0)
semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/65)
semctl$IPC_RMID(r0, 0x0, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
semget(0x0, 0x2, 0x203)
r2 = semget$private(0x0, 0x4, 0x6)
semctl$SEM_INFO(r2, 0x3, 0x13, &(0x7f0000000100)=""/143)
r3 = semget$private(0x0, 0x1, 0x0)
semctl$IPC_RMID(r3, 0x0, 0x0)
r4 = geteuid()
semctl$IPC_SET(r3, 0x0, 0x1, &(0x7f00000001c0)={{0x1, 0x0, 0xee01, r4, 0xee01, 0x10, 0x3}, 0x7, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x7})
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x19, 0xfffffff9, 0xfffeffff, 0x348, 0x1c40, 0x1, 0x401, [], 0x0, 0xffffffffffffffff, 0x2}, 0x40)
ioctl$EVIOCSABS0(0xffffffffffffffff, 0x401845c0, &(0x7f0000000080)={0x7, 0x8, 0x4, 0x7, 0x40, 0x2})

17:39:52 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:52 executing program 4:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = gettid()
sched_rr_get_interval(r1, &(0x7f0000000000))
clock_gettime(0x6, &(0x7f0000000080))

17:39:52 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:52 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00')
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
r4 = fcntl$getown(r0, 0x9)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r1}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_PID={0x8, 0x1c, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040800}, 0x4000)

17:39:52 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="233f9bafb9c46f757ba3a3b49c2dbd5ad09a2f5be69483a1ba2676fd65d5a7dfdc"], 0x15c}}, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan3\x00', <r2=>0x0})
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="d8a7d255bea211036d8a88b0254f8914811cfb6b106204cb76ac9f185ca97d8d5dbc69389d199141245268e506017b513c543e5ee595655aa9bd44501509a25ac920f968f66da18da4d46e8c9a2520c268c2eaaf5dcce7673309e138fc4f7648ff7848a361afeb1d0c4706b135d326224de3b31e18dbb5a40ecf87b03eb5df43706d6898b2b14d3289bff1", @ANYRES16=r1, @ANYBLOB="000429bd7000ffdbdf251d00000008000300", @ANYRES32=r2, @ANYBLOB="0c0006000300000003000000"], 0x28}, 0x1, 0x0, 0x0, 0x20048000}, 0x0)

17:39:52 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:52 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:52 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:52 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = fork()
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00')

17:39:52 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x5a, &(0x7f00000000c0)={0x0}}, 0x44081)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}, 0x1, 0x0, 0x0, 0x40081}, 0x20040000)

17:39:53 executing program 3:
r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x2, 0x40000)
fork()
getpid()
getpid()
r1 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
r2 = gettid()
socketpair(0x21, 0x800, 0xd297, &(0x7f0000000080))
wait4(r2, 0x0, 0x1000000, 0x0)
ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, &(0x7f0000000040))
gettid()

17:39:53 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:53 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:53 executing program 4:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
gettid()
clock_gettime(0x6, &(0x7f0000000080))

17:39:53 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_OPEN(r0, &(0x7f0000000040)={0x20, 0x0, r1, {0x0, 0xa}}, 0x20)
write$FUSE_GETXATTR(r0, &(0x7f0000000000)={0x18, 0x0, r1, {0x1}}, 0x18)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:53 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', <r3=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_GET_SEC_DEV(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x6c}, 0x1, 0x0, 0x0, 0xc000015}, 0x1)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24008800}, 0x8000)
sendmsg$NL802154_CMD_SET_BACKOFF_EXPONENT(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0x55}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_MIN_BE={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x8040}, 0x1)

17:39:53 executing program 2:
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:53 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:53 executing program 3:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
getrusage(0x0, &(0x7f0000000000))
write$FUSE_LK(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0xffffffffffffffda, 0x0, {{0x6, 0x3, 0x2}}}, 0x28)

17:39:53 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:53 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:53 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000000)="0602e77f89315b7e3e", 0x9)

17:39:53 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x60, 0x0, 0x4, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0xff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x5}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x60}, 0x1, 0x0, 0x0, 0x8000000}, 0x4008000)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000001c0)={'wpan3\x00', <r2=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, 0x0, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000040}, 0x1)

17:39:53 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:53 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:54 executing program 4:
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
clock_gettime(0x6, &(0x7f0000000080))

17:39:54 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:54 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:54 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', r0)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x124, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0xcc, 0x25, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x9}, @NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "4a6243e1cd2d704aa1729a6c8a9503a616d4eecfe54c21d1a7cc31d46195e567"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "842bc1fbee11641b5d8daeebfe3793b3"}, @NL802154_KEY_ATTR_ID={0x74, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x54, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0x300}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x7}]}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x124}, 0x1, 0x0, 0x0, 0x800}, 0x5)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="be4e496c4afc1c24d365d7d73f00"], 0x15c}}, 0x0)

17:39:54 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')

17:39:54 executing program 3:
sendmsg$NL802154_CMD_GET_SEC_KEY(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x54, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
r0 = fork()
r1 = getpgid(r0)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000000)=r1, 0x12)
wait4(r0, 0x0, 0x20000000, 0x0)
ioctl$FBIOGETCMAP(0xffffffffffffffff, 0x4604, &(0x7f0000000280)={0x7, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0]})

17:39:54 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:54 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:54 executing program 0:
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000000)={0x80, 0x2, 0x4, 0x40, 0x6, {0x77359400}, {0x5, 0x1, 0x8, 0x2, 0x20, 0x80, "039d3708"}, 0x57, 0x4, @userptr=0x8, 0x1ff, 0x0, <r0=>0xffffffffffffffff})
r1 = geteuid()
write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x3, 0x1, 0x9, 0xd4c, 0x4, 0xffff, {0x1, 0x7ff, 0x0, 0x514, 0x5, 0x1, 0x7, 0x9, 0xb1, 0x7000, 0x1, r1, 0xffffffffffffffff, 0x8001, 0x3}}}, 0x90)
ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x860, 0x7, 0x4, 0x0, 0x0, {}, {0x2, 0x1, 0x6, 0x4, 0x7, 0x1, "79d39495"}, 0x9, 0x4, @fd=<r2=>0xffffffffffffffff, 0x1})
ioctl$FBIOPAN_DISPLAY(0xffffffffffffffff, 0x4606, &(0x7f00000002c0)={0x80, 0x640, 0x40, 0x480, 0x7, 0xfffffff8, 0x0, 0x2, {0x4, 0x8}, {0x80000001, 0x2, 0x1}, {0x2, 0x6}, {0x9d, 0x20}, 0x1377417216dfaa2a, 0x10, 0x7fffffff, 0x1f, 0x0, 0x9, 0x5, 0x884, 0x4, 0x6da, 0x1f, 0x2f5d07a1, 0x0, 0x2, 0x3, 0xb})
clock_gettime(0x0, &(0x7f0000000080)={<r3=>0x0, <r4=>0x0})
ioctl$vim2m_VIDIOC_QBUF(0xffffffffffffffff, 0xc058560f, &(0x7f0000000180)={0x800, 0x2, 0x4, 0x10000, 0x80000000, {r3, r4/1000+10000}, {0x3, 0x0, 0x7f, 0x3f, 0x8e, 0x9, "1dd20685"}, 0xfffffffb, 0x2, @fd=r2, 0x0, 0x0, r0})
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/time_for_children\x00')

17:39:54 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x48, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xd}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x40000)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)

17:39:54 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:54 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/net\x00')
ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0x6)
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
r1 = getpgid(0x0)
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000580)={0x1, 0x1, [@dev={[], 0x35}]})
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
r2 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000340)={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x10)
getpgid(r1)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000380))
capset(&(0x7f0000000240)={0x20080522, r1}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x7, 0xfffffff9, 0x8})
syz_open_procfs$namespace(r1, &(0x7f00000001c0)='ns/pid\x00')
recvfrom$phonet(r0, &(0x7f0000000080)=""/248, 0xf8, 0x20, &(0x7f0000000180)={0x23, 0x5, 0x5, 0x74}, 0x10)

17:39:55 executing program 4:
fork()
clock_gettime(0x6, &(0x7f0000000080))

17:39:55 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:55 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x86b9)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x15c}}, 0x0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000200)={0xc, 0x0, &(0x7f0000000100)=[@enter_looper, @exit_looper, @exit_looper], 0x9c, 0x0, &(0x7f0000000140)="371b79e334e827b6a3c315c2c7454f097f93cd290064e9f9d1983b714618a361c2f5e458370c60e20ad56a72cf0eaa6247cbaeaf7c1af82985fd52e9a7d28fa3afa7e59e9f4ffc329f7f0293382457a1a6a4489a26d0c251e3b25a66ac78382f502b8a1b5fa195213e4432373ee525338b870172f19e19bee99f9a94ecaf1e890c3bb0ffb5bd0331f3fde2f1cdbd0aa65c65a8f45b523e361256aac9"})
write$FUSE_GETXATTR(r2, 0x0, 0x0)
r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r4, 0x0, 0x0)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r2, 0xd000943e, &(0x7f00000012c0)={0x0, <r5=>0x0, "d1a4ca7ea250ffe4ef4ff96c4b85a5b7de9a6fcf289df83838c46bcc8afce6e5cf1ea75f76ed02eb5e836461c9faec7d4ef226f8ed1dcc16fa7148117f895fe7ef8815dc9e94eeccd1fe0d47fa076af13b859b5c7df5b37e6c9bb7d2d8ea3fabaabcde8bc6ef42858f04e989e52aaaef30a01aeb4353cf657b59813c6ed479232f9fa40d95c0a845f1fcf75e587eabf2dec617dd677cf9ec17e0a4acd0600886ea5c4845f9966c89dcb808c233e633558f1ba90f7283fb04b8f4a4ca32dd0f30f1371861633b0cfc51404e9f2e089f2125821281b574bc2ec9994b5cf6075c7dede54507fc11daac78933387d19cfb77e524f71176c61588e9b51c92e4168d4d", "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"})
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r4, 0xd000943e, &(0x7f00000002c0)={0x0, r5, "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", "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"})
r6 = fork()
write$FUSE_LK(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, {{0x0, 0x8f, 0x2, r6}}}, 0x28)

17:39:55 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:55 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
write$FUSE_OPEN(0xffffffffffffffff, &(0x7f0000000000)={0x20, 0xffffffffffffffda, 0x0, {0x0, 0x12}}, 0x20)

17:39:55 executing program 3:
socketpair(0x9, 0x2, 0x3, 0x0)
r0 = fork()
wait4(r0, 0x0, 0x20000000, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
r2 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r2}, 0x0)
write$FUSE_LK(0xffffffffffffffff, &(0x7f0000002140)={0x28, 0x0, r1, {{0x5, 0x3, 0x2, r2}}}, 0x28)
getpid()
r3 = getpid()
write$FUSE_INTERRUPT(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0xfffffffffffffffe, r1}, 0x10)
wait4(r3, &(0x7f0000002180), 0x8, &(0x7f0000000040))

17:39:55 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0)
openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card3/oss_mixer\x00', 0x600002, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/cgroup\x00')
ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000240)={{0x0, 0x0, 0x80}})
ioctl$KVM_GET_MSRS(r0, 0xc008ae88, &(0x7f0000000000)={0x4, 0x0, [{}, {}, {}, {}]})

17:39:55 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x40)

17:39:55 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000ffdbdf251b0000000c00060003000000000000000c0006000200000002000000100023800c0004000203aaaaaaaaaaaa100023800c0004000202aaaaaaaaaaaa08000300", @ANYRES32=0x0, @ANYBLOB="27dc1a7fcb7ad528b550df81d32312786e8260ed6c159e1f22e26d192ce5225cca7ebb601a0f2c10c92d3ff34d0163ac52da018c5b80e4b6357eb4d458720419b0822665caeb1a62382ced00ddda043b67a0207f8e2f0ee3f46b70748498cdabd27f31c51d9043d82cd8fac65c0d69e0cb149aa9c21a2562916cc184362526f35ed2c04464679d3b5caa78233480c8d6d6acd1708fc88d1a7b9be4fb750618c900ede806dd6b1a38dda15d24faf1ee0000"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x9)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000400)={'wpan1\x00', <r1=>0x0})
sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x0, 0x2, 0x70bd2b, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000001}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_CCA_OPT={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x15c}}, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="ab099c648b", @ANYRES16=0x0, @ANYBLOB="000426bd7000fedbdf251d00000018002480140003800500020001000000080004001d000000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x2400008c)

17:39:55 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:55 executing program 4:
clock_gettime(0x6, &(0x7f0000000080))

17:39:55 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x40)

17:39:55 executing program 5:
semget(0x0, 0x3, 0x80)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000000080)={0x47, "24ac40ad6f34b1fc8c8becbb13149c37bbc524aa1c6b26b30a5de4af872af97dc667f8edb598ae2ca7b15eaaf1a017e32dd21f837182c3217acc74a769dd5448102999313a99b7"})
ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f00000002c0)={0x1000, "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"})
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES16=r0], 0x15c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

17:39:55 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:55 executing program 0:
r0 = getpgid(0x0)
capset(&(0x7f00000002c0)={0x19980330, r0}, 0x0)
r1 = getpgid(r0)
capset(&(0x7f00000002c0)={0x19980330, r1}, 0x0)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/time_for_children\x00')

17:39:55 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan4\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan4\x00', <r3=>0x0})
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x44, 0x0, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x20000000)

17:39:55 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:56 executing program 3:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, &(0x7f0000000000)={0x1})
r1 = fork()
wait4(r1, 0x0, 0x20000000, 0x0)

17:39:56 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, 0x0, 0x40)

17:39:56 executing program 4:
clock_gettime(0x0, &(0x7f0000000080))

17:39:56 executing program 0:
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000000))
pselect6(0x0, 0x0, &(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)={0x0, 0x989680}, 0x0)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:56 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:56 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xaf11dc22b2bd81f0}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x3c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_CCA_ED_LEVEL={0x0, 0xe, 0xf}, @NL802154_ATTR_CCA_ED_LEVEL={0x0, 0xe, 0x8}]}, 0x3e}, 0x1, 0x0, 0x0, 0x8000}, 0x10)

17:39:56 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:56 executing program 4:
clock_gettime(0x0, &(0x7f0000000080))

17:39:56 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:56 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x50, r2, 0x300, 0x70bd25, 0x25dfdc00, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x10}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x9}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0xf}]}, 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x8004)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000200)={'wpan0\x00', <r4=>0x0})
sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r3, &(0x7f0000000580)={&(0x7f00000001c0), 0xc, &(0x7f0000000540)={&(0x7f00000002c0)={0x27c, r2, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x54, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3f}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}]}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_DEVKEY={0x100, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xec, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x58, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xffff}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xad7c}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x4c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa1}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x2}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6}]}, @NL802154_ATTR_SEC_DEVKEY={0xc, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8000}]}, @NL802154_ATTR_SEC_DEVKEY={0xd8, 0x24, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}, @NL802154_DEVKEY_ATTR_ID={0x2c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}, @NL802154_DEVKEY_ATTR_ID={0x84, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x40, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x200}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0102}}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x27c}, 0x1, 0x0, 0x0, 0x44800}, 0x1)

17:39:56 executing program 0:
ioctl$EVIOCGUNIQ(0xffffffffffffffff, 0x80404508, &(0x7f00000001c0)=""/31)
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x64, r2, 0x10, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_NETNS_FD={0x8, 0x1d, r0}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0xa3f1840e314a4738}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x64}, 0x1, 0x0, 0x0, 0x400000d0}, 0x400c0)
r3 = syz_open_dev$binderN(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x802)
fcntl$getown(r3, 0x9)

17:39:56 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:57 executing program 3:
r0 = fork()
ioctl$KVM_GET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="0a0000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000840000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000"])
wait4(r0, 0x0, 0x20000000, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$EVIOCGUNIQ(r1, 0x80404508, &(0x7f0000000180)=""/109)

17:39:57 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:57 executing program 4:
clock_gettime(0x0, &(0x7f0000000080))

17:39:57 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:57 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
ioctl$EVIOCGABS0(r0, 0x80184540, &(0x7f0000000000)=""/156)
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')

17:39:57 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', r0)
r2 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r2, 0x0, 0x0)
r3 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r3, 0x0, 0x0)
sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x64, r1, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r2}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x64}, 0x1, 0x0, 0x0, 0x404a881}, 0x8000)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
sendmsg$NL802154_CMD_GET_SEC_KEY(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x28, r1, 0x300, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x800)

17:39:57 executing program 4:
clock_gettime(0x6, 0x0)

17:39:57 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000001440)={0xdc, 0x0, &(0x7f0000001280)=[@reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x60, 0x18, &(0x7f0000001040)={@ptr={0x70742a85, 0x1, &(0x7f0000000040)=""/4096, 0x1000, 0x1, 0x37}, @fd, @fda={0x66646185, 0x3, 0x0, 0x1b}}, &(0x7f00000010c0)={0x0, 0x28, 0x40}}, 0x1000}, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x18, &(0x7f0000001100)={@flat=@weak_handle={0x77682a85, 0xa, 0x3}, @fda={0x66646185, 0x1, 0x1, 0x1b}, @fd={0x66642a85, 0x0, r0}}, &(0x7f0000001180)={0x0, 0x18, 0x38}}}, @reply={0x40406301, {0xc9, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x48, 0x18, &(0x7f00000011c0)={@flat=@handle={0x73682a85, 0x100b, 0x3}, @fd, @fd={0x66642a85, 0x0, r1}}, &(0x7f0000001240)={0x0, 0x18, 0x30}}}, @release={0x40046306, 0x3}], 0xa2, 0x0, &(0x7f0000001380)="c3ce2a8edb9ea73bfa449ffe34cdea9a1d83b02a9fdc93c35ead8bca825016a6a832a64df900abfd6266239988d9a92bc3a6c19fafbb54ea4ff8d9efac50ab822c72cfbdd91ed8e29f719b27a32a2a5c8fddb971a3c2159a3ce9225cc91afeb5762a68a8cc2170d90bf1b3fedecd27ef8083fa10c4d8eb950563e4158d9164a4a7bc7e2a9c66b716b109fef903ce07434f237fa754b53bfb92b9cdd95ca8fbaa5308"})
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00')
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000001740)={0x60, 0x0, &(0x7f00000015c0)=[@request_death, @transaction={0x40406300, {0x2, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x58, 0x18, &(0x7f0000001500)={@flat=@binder={0x73622a85, 0x100a, 0x3}, @ptr={0x70742a85, 0x1, &(0x7f0000001480)=""/120, 0x78, 0x1, 0x3d}, @flat=@weak_binder={0x77622a85, 0xa, 0x1}}, &(0x7f0000001580)={0x0, 0x18, 0x40}}}, @free_buffer], 0xec, 0x0, &(0x7f0000001640)="73b7768d332fb35e84de8c7339b20e43c35582622f15e63655101e8ea0b3492b23be9803232b4824bf81b2d2957ec459c3542d548b86f14305636c74af2fb3ea2cf4836e4279904c95ae12f0823127954195e931461ca1718b2ca0d7dffae4984346848c16b4c623d16ce38e974ef1c27923e043ca908b033eca94300c47fa35dde5b6e29ad1347f3e7f6ae90785cf9c41f05542875fa65b6353cdfe773c71d85468b40fb2639653234f106c8c2f1db77986915e4b5387216797b48ca927dfaa606f00b9528a201b73a632b6e2531a15ae7f237dcaa0677f72b6d9fbd0842957c708500ba3e7beee6c13d4ef"})

17:39:57 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:57 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x23, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0002}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:57 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYRESDEC=r0], 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x800)

17:39:57 executing program 4:
clock_gettime(0x6, 0x0)

17:39:58 executing program 3:
r0 = fork()
r1 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r1, 0x0, 0x0)
r2 = geteuid()
read$FUSE(r1, &(0x7f00000000c0)={0x2020, 0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_DIRENTPLUS(r1, &(0x7f0000002100)={0x210, 0x0, 0x0, [{{0x3, 0x2, 0x2, 0x6, 0x2, 0x80, {0x5, 0x5, 0x0, 0xff, 0x9, 0x4, 0x1, 0x867a, 0xff, 0x2000, 0x9, r2, 0xee01, 0x9, 0x7}}, {0x1, 0x9, 0x7, 0x7, '@!#^:-\x0e'}}, {{0x3, 0x1, 0x7, 0x2, 0xac, 0x8, {0x5, 0x6d1a5ddd, 0x0, 0x7, 0x7, 0x1, 0x1, 0x9, 0x8, 0x8000, 0xc2c3, r3, 0x0, 0x1, 0xfff}}, {0x4, 0x7, 0x0, 0x5}}, {{0x6, 0x2, 0x5, 0x1, 0x5, 0x9, {0x4, 0x1, 0xcb5, 0x8, 0x1000, 0x81, 0xfffffff9, 0x7, 0x10001, 0xa000, 0x0, 0xffffffffffffffff, 0xee00, 0x1, 0x2}}, {0x4, 0xf54, 0x29, 0x4, '/sys/kernel/debug/binder/transaction_log\x00'}}]}, 0x210)
fcntl$getown(r1, 0x9)
wait4(r0, 0x0, 0x20000000, 0x0)

17:39:58 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:58 executing program 1:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x34, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

17:39:58 executing program 4:
clock_gettime(0x6, 0x0)

17:39:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0)
read$FUSE(r1, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/net\x00')

17:39:58 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00'], 0x15c}}, 0x0)

[  351.411364] kasan: CONFIG_KASAN_INLINE enabled
[  351.428158] kasan: GPF could be caused by NULL-ptr deref or user memory access
17:39:58 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0xd000943e, &(0x7f0000000240)={0x0, 0x0, "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", "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"})

17:39:58 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl802154(&(0x7f0000000040)='nl802154\x00', 0xffffffffffffffff)
sendmsg$NL802154_CMD_DEL_SEC_DEV(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x20000004}, 0x40)

[  351.487315] general protection fault: 0000 [#1] PREEMPT SMP KASAN
[  351.493574] Modules linked in:
[  351.496772] CPU: 0 PID: 9501 Comm: syz-executor.1 Not tainted 4.14.228-syzkaller #0
[  351.504561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  351.513912] task: ffff888097df8680 task.stack: ffff88805a1b8000
[  351.519970] RIP: 0010:nl802154_del_llsec_dev+0x13b/0x2e0
[  351.525411] RSP: 0018:ffff88805a1bf6e0 EFLAGS: 00010246
17:39:58 executing program 0:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time\x00')

17:39:58 executing program 5:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\'], 0x15c}}, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x44081)
ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan4\x00', <r3=>0x0})
r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080)='nl802154\x00', r0)
ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000005c0)={'wpan1\x00', <r5=>0x0})
sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r0, &(0x7f00000006c0)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032abd7000fedbdf25110000000c000600c1ebe156fd9f26cc08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=0x0, @ANYBLOB="0c000600010000000100000008000300", @ANYRES32=r3, @ANYBLOB="08000300", @ANYRES32=r3, @ANYBLOB="00000000000000ec"], 0x68}}, 0x0)
r6 = timerfd_create(0x9, 0x800)
fcntl$getown(r6, 0x9)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000100)={'wpan3\x00', <r7=>0x0})
r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000340)='SMC_PNETID\x00', 0xffffffffffffffff)
sendmsg$SMC_PNETID_FLUSH(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000380)={0x54, r8, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'sit0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x54}}, 0x4000000)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000140)={'wpan4\x00', <r9=>0x0})
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan4\x00', <r10=>0x0})
sendmsg$NL802154_CMD_GET_SEC_KEY(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000900)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="020029bd7000fbdbdf251600000008000300", @ANYRES32=r7, @ANYRESOCT=r0, @ANYRES32=r10, @ANYBLOB="0c0006000100000027ea000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r9, @ANYBLOB="694d85634b01902d0fad57172624f64108622192fe39d84340f62b807c99f956821b423938a912a01e80b58213f8b42cee96a655584bfdd6cf401fb311623c8f48a0254471e33668646ced38499f537af239a5c9454a6f5af7d4d932ba49a05f0c4c34fb8f11835821309b4445474ca88cfff878d3b0a8331ba9949b5b33746d1cea14f132aae1e3fe474f18a1d897e6667000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x80c0}, 0x20001084)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan1\x00'})
sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000008c0)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010027bd7000fedbdf251b000000100023800c0004000202aaaaaaaaaaaa100023800c0004000201aaaaaaaaaaaa08000300", @ANYRES32=0x0, @ANYBLOB="100023800c0004000200aaaaaaaaaaaa100023800c0004000202aaaaaaaaaaaa08000300", @ANYRES32=0x0, @ANYBLOB="690006000000000000000000"], 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x81)

[  351.530767] RAX: dffffc0000000000 RBX: ffff8880b28cb500 RCX: 0000000000000000
[  351.538035] RDX: 0000000000000000 RSI: ffffffff86dab015 RDI: ffff8880b28cb618
[  351.545304] RBP: 1ffff1100b437ede R08: 0000000000000001 R09: ffff88805a1bf990
[  351.552567] R10: ffff88805a1bf6af R11: ffff888097df8680 R12: ffff8880abb42980
[  351.559842] R13: ffff8880abb69010 R14: ffffffff886f38a0 R15: ffff8880b2fde300
[  351.567372] FS:  00007fb1c1518700(0000) GS:ffff8880ba400000(0000) knlGS:0000000000000000
[  351.575596] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
17:39:58 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/time_for_children\x00')
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='1', 0x1)

[  351.581474] CR2: 000000c000c00000 CR3: 0000000097440000 CR4: 00000000001406f0
[  351.588916] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  351.596182] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  351.603483] Call Trace:
[  351.606076]  ? nl802154_del_llsec_key+0x2f0/0x2f0
[  351.610922]  ? validate_nla+0x192/0x5e0
[  351.614894]  ? nl802154_dump_wpan_phy_done+0x40/0x40
[  351.619995]  ? nla_parse+0x157/0x1f0
[  351.623712]  ? nl802154_dump_wpan_phy_done+0x40/0x40
[  351.628846]  genl_family_rcv_msg+0x572/0xb20
[  351.633259]  ? genl_rcv+0x40/0x40
17:39:58 executing program 0:
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0)
write$FUSE_GETXATTR(r0, 0x0, 0x0)
getgroups(0x5, &(0x7f0000000000)=[0xee00, <r1=>0xee01, 0x0, 0x0, 0xee01])
ioctl$TUNSETGROUP(r0, 0x400454ce, r1)
ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000080))
read$FUSE(0xffffffffffffffff, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
r3 = getpgrp(r2)
syz_open_procfs$namespace(r3, &(0x7f0000000040)='ns/time_for_children\x00')

[  351.636710]  ? __ww_mutex_wakeup_for_backoff+0x210/0x210
[  351.642163]  ? trace_hardirqs_on+0x10/0x10
[  351.646394]  ? sock_sendmsg+0xb5/0x100
[  351.650286]  genl_rcv_msg+0xaf/0x140
[  351.654005]  netlink_rcv_skb+0x125/0x390
[  351.658063]  ? genl_family_rcv_msg+0xb20/0xb20
[  351.662654]  ? netlink_ack+0x9a0/0x9a0
[  351.666543]  ? lock_acquire+0x170/0x3f0
[  351.670527]  genl_rcv+0x24/0x40
[  351.673791]  netlink_unicast+0x437/0x610
[  351.677851]  ? netlink_sendskb+0xd0/0xd0
[  351.681909]  ? __check_object_size+0x179/0x230
[  351.686502]  netlink_sendmsg+0x62e/0xb80
[  351.690563]  ? nlmsg_notify+0x170/0x170
[  351.694532]  ? kernel_recvmsg+0x210/0x210
[  351.698679]  ? security_socket_sendmsg+0x83/0xb0
[  351.703427]  ? nlmsg_notify+0x170/0x170
[  351.707381]  sock_sendmsg+0xb5/0x100
[  351.711076]  ___sys_sendmsg+0x6c8/0x800
[  351.715030]  ? copy_msghdr_from_user+0x3b0/0x3b0
[  351.719778]  ? do_futex+0x12b/0x1570
[  351.723492]  ? __fget+0x1fe/0x360
[  351.726942]  ? lock_acquire+0x170/0x3f0
[  351.730986]  ? lock_downgrade+0x740/0x740
[  351.735119]  ? __fget+0x225/0x360
[  351.738570]  ? __fdget+0x196/0x1f0
[  351.742094]  ? sockfd_lookup_light+0xb2/0x160
[  351.746569]  __sys_sendmsg+0xa3/0x120
[  351.750349]  ? SyS_shutdown+0x160/0x160
[  351.754304]  SyS_sendmsg+0x27/0x40
[  351.757837]  ? __sys_sendmsg+0x120/0x120
[  351.761897]  do_syscall_64+0x1d5/0x640
[  351.765767]  entry_SYSCALL_64_after_hwframe+0x46/0xbb
[  351.770936] RIP: 0033:0x466459
[  351.774103] RSP: 002b:00007fb1c1518188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  351.781802] RAX: ffffffffffffffda RBX: 000000000056bf60 RCX: 0000000000466459
[  351.790032] RDX: 0000000000000040 RSI: 0000000020000180 RDI: 0000000000000004
[  351.797299] RBP: 00000000004bf9fb R08: 0000000000000000 R09: 0000000000000000
[  351.804557] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056bf60
[  351.811804] R13: 00007ffead50563f R14: 00007fb1c1518300 R15: 0000000000022000
[  351.819058] Code: 00 00 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 96 01 00 00 48 8b 93 18 01 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 d1 48 c1 e9 03 <0f> b6 0c 01 48 89 d0 83 e0 07 83 c0 01 38 c8 7c 08 84 c9 0f 85 
[  351.838151] RIP: nl802154_del_llsec_dev+0x13b/0x2e0 RSP: ffff88805a1bf6e0
[  351.849900] ---[ end trace 5f407b650732609d ]---
[  351.855143] Kernel panic - not syncing: Fatal exception
[  351.861249] Kernel Offset: disabled
[  351.864985] Rebooting in 86400 seconds..